Test ID:	1.3.6.1.4.1.25623.1.0.105282
Category:	Denial of Service
Title:	Erlang/OTP (Erlang OTP) DoS Vulnerability (Feb 2025) - Windows
Summary:	Erlang/OTP (Erlang OTP) is prone to a denial of service (DoS); vulnerability in the SSH component.
Description:	Summary: Erlang/OTP (Erlang OTP) is prone to a denial of service (DoS) vulnerability in the SSH component. Vulnerability Insight: Packet size is not verified properly for SFTP packets. Vulnerability Impact: As a result when multiple SSH packets (conforming to max SSH packet size) are received by ssh, they might be combined into SFTP packet which will exceed the max allowed packet size and potentially cause large amount of memory to be allocated. Note that situation described above can only happen for successfully authenticated users after completing the SSH handshake. Affected Software/OS: Erlang/OTP (Erlang OTP) versions prior to 25.3.2.18, 26.x prior to 26.2.5.9 and 27.x prior to 27.2.4. Solution: Update to version 25.3.2.18, 26.2.5.9, 27.2.4 or later. CVSS Score: 5.4 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-26618
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.