CVE-2017-1000385

Name of the Vulnerable Software and Affected Versions: Erlang (affected versions not specified)

Description: The issue is related to the disclosure of information through inconsistency in the Erlang language interpreter. It may allow a remote attacker to gain access to confidential data. Specifically, the Erlang otp TLS server responds with different TLS alerts to various error types in the RSA PKCS #1 1.5 padding, enabling an attacker to decrypt content or sign messages with the server's private key, which is a variation of the Bleichenbacher attack.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.