Ubuntu 24.10: USN-7313-1 moderate: erlang denial of service

ubuntu

March 3, 2025

Erlang could be made to consume resources if it received specially crafted network traffic.

Summary

Erlang could be made to consume resources if it received specially crafted

network traffic.

Software Description:

- erlang: Concurrent, real-time, distributed functional language

Details:

It was discovered that Erlang incorrectly handled SFTP packet sizes. A

remote attacker could possibly use this issue to cause Erlang to consume

resources, resulting in a denial of service.

Topics Covered

security advisory denial of service network traffic ubuntu resource consumption erlang March 2025

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   erlang                          1:25.3.2.12+dfsg-1ubuntu2.1
   erlang-ssh                      1:25.3.2.12+dfsg-1ubuntu2.1

Ubuntu 24.04 LTS
   erlang                          1:25.3.2.8+dfsg-1ubuntu4.1
   erlang-ssh                      1:25.3.2.8+dfsg-1ubuntu4.1

Ubuntu 22.04 LTS
   erlang                          1:24.2.1+dfsg-1ubuntu0.2
   erlang-ssh                      1:24.2.1+dfsg-1ubuntu0.2

Ubuntu 20.04 LTS
   erlang                          1:22.2.7+dfsg-1ubuntu0.3
   erlang-ssh                      1:22.2.7+dfsg-1ubuntu0.3

In general, a standard system update will make all the necessary changes.