USN-7656-1: Erlang vulnerabilities

Q: What conditions are required to exploit the SSH issue?

An attacker must be able to intercept SSH communications. Under that condition, they may insert optional messages into a connection during the SSH handshake.

Q: Who is exposed to the ZIP archive issue?

Users or automated systems that open specially crafted ZIP archives are exposed. Successful exploitation could allow files to be overwritten outside the intended extraction directory.

Q: Which Ubuntu packages are identified as affected?

The advisory identifies the erlang and erlang-ssh packages on Ubuntu.

Published Jul 21, 2025

Updated

It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. (CVE-2025-46712) It was discovered that Erlang OTP incorrectly handled ZIP archives. If a user or automated system were tricked into opening a specially crafted ZIP archive, a remote attacker could possibly use this issue to overwrite arbitrary files outside of the intended directory. (CVE-2025-4748)

Affected Software

12 affected componentsFixes available

All of the following

ubuntu/erlang<1:27.3+dfsg-1ubuntu1.2

1:27.3+dfsg-1ubuntu1.2

Ubuntu Ubuntu=25.04

All of the following

ubuntu/erlang-ssh<1:27.3+dfsg-1ubuntu1.2

1:27.3+dfsg-1ubuntu1.2

Ubuntu Ubuntu=25.04

All of the following

ubuntu/erlang<1:25.3.2.8+dfsg-1ubuntu4.4

1:25.3.2.8+dfsg-1ubuntu4.4

Ubuntu Ubuntu=24.04

All of the following

ubuntu/erlang-ssh<1:25.3.2.8+dfsg-1ubuntu4.4

1:25.3.2.8+dfsg-1ubuntu4.4

Ubuntu Ubuntu=24.04

All of the following

ubuntu/erlang<1:24.2.1+dfsg-1ubuntu0.5

1:24.2.1+dfsg-1ubuntu0.5

Ubuntu Ubuntu=22.04

All of the following

ubuntu/erlang-ssh<1:24.2.1+dfsg-1ubuntu0.5

1:24.2.1+dfsg-1ubuntu0.5

Ubuntu Ubuntu=22.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/erlang to a version that resolves this vulnerability.
Fixed in 1:27.3+dfsg-1ubuntu1.2
Upgrade
Upgrade ubuntu/erlang-ssh to a version that resolves this vulnerability.
Fixed in 1:27.3+dfsg-1ubuntu1.2
Upgrade
Upgrade ubuntu/erlang to a version that resolves this vulnerability.
Fixed in 1:25.3.2.8+dfsg-1ubuntu4.4
Upgrade
Upgrade ubuntu/erlang-ssh to a version that resolves this vulnerability.
Fixed in 1:25.3.2.8+dfsg-1ubuntu4.4
Upgrade
Upgrade ubuntu/erlang to a version that resolves this vulnerability.
Fixed in 1:24.2.1+dfsg-1ubuntu0.5
Upgrade
Upgrade ubuntu/erlang-ssh to a version that resolves this vulnerability.
Fixed in 1:24.2.1+dfsg-1ubuntu0.5

Event History

Jul 21, 2025

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What conditions are required to exploit the SSH issue?

An attacker must be able to intercept SSH communications. Under that condition, they may insert optional messages into a connection during the SSH handshake.

Who is exposed to the ZIP archive issue?

Users or automated systems that open specially crafted ZIP archives are exposed. Successful exploitation could allow files to be overwritten outside the intended extraction directory.

Which Ubuntu packages are identified as affected?

The advisory identifies the erlang and erlang-ssh packages on Ubuntu.

USN-7656-1: Erlang vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What conditions are required to exploit the SSH issue?

Who is exposed to the ZIP archive issue?

Which Ubuntu packages are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to exploit the SSH issue?

Who is exposed to the ZIP archive issue?

Which Ubuntu packages are identified as affected?