PT-2025-37165
CVE-2025-48041
·
Published
2025-09-11
·
Updated
2026-09-05
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Erlang OTP versions 17.0 through 28.0.3
Erlang OTP versions 26.2.5.15
Erlang OTP versions 27.3.4.3
Description
An Allocation of Resources Without Limits or Throttling issue exists in the Erlang OTP ssh (ssh sftp modules), potentially leading to Excessive Allocation and Flooding. The vulnerability is associated with the
ssh sftpd.erl file.Recommendations
Update Erlang OTP to a version later than 28.0.3.
Update Erlang OTP to a version later than 26.2.5.15.
Update Erlang OTP to a version later than 27.3.4.3.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾