Test ID:	1.3.6.1.4.1.25623.1.0.105326
Category:	Denial of Service
Title:	Erlang/OTP (Erlang OTP) DoS Vulnerability (Mar 2025) - Windows
Summary:	Erlang/OTP (Erlang OTP) is prone to a denial of service (DoS); vulnerability in the SSH component.
Description:	Summary: Erlang/OTP (Erlang OTP) is prone to a denial of service (DoS) vulnerability in the SSH component. Vulnerability Insight: - Maliciously formed KEX init message can result with high memory usage. - Implementation does not verify RFC specified limits on algorithm names (64 characters) provided in KEX init message. Vulnerability Impact: Big KEX init packet may lead to inefficient processing of the error data. As a result, large amount of memory will be allocated for processing malicious data. Affected Software/OS: Erlang/OTP (Erlang OTP) versions prior to 25.3.2.19, 26.x prior to 26.2.5.10 and 27.x prior to 27.3.1. Solution: Update to version 25.3.2.19, 26.2.5.10, 27.3.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-30211
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.