Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Ubuntu 24.10, 24.04 LTS: 7425-1 critical: erlang memory issue

ubuntu
Calendar Grey April 8, 2025
Dist Ubuntu Esm H88
Ubuntu's Erlang installation is facing a critical vulnerability that could lead to severe memory depletion. Apply updates without delay to ensure your system's protection.
Erlang could be made to consume large amount of memory.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Erlang could be made to consume large amount of memory. Software Description: - erlang: Concurrent, real-time, distributed functional language Details: It was discovered that Erlang OTP's SSH module did not limit the size of certain data in initialization messages. An attacker could possibly use this issue to consume large amount of memory leading to a denial of service.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10   erlang                          1:25.3.2.12+dfsg-1ubuntu2.2   erlang-ssh                      1:25.3.2.12+dfsg-1ubuntu2.2 Ubuntu 24.04 LTS   erlang                          1:25.3.2.8+dfsg-1ubuntu4.2   erlang-ssh                      1:25.3.2.8+dfsg-1ubuntu4.2 Ubuntu 22.04 LTS   erlang                          1:24.2.1+dfsg-1ubuntu0.3   erlang-ssh                      1:24.2.1+dfsg-1ubuntu0.3 Ubuntu 20.04 LTS   erlang                          1:22.2.7+dfsg-1ubuntu0.4   erlang-ssh                      1:22.2.7+dfsg-1ubuntu0.4 In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7425-1

  CVE-2025-30211

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7425-1

Package Information

https://launchpad.net/ubuntu/+source/erlang/1:25.3.2.12+dfsg-1ubuntu2.2 https://launchpad.net/ubuntu/+source/erlang/1:25.3.2.8+dfsg-1ubuntu4.2 https://launchpad.net/ubuntu/+source/erlang/1:24.2.1+dfsg-1ubuntu0.3 https://launchpad.net/ubuntu/+source/erlang/1:22.2.7+dfsg-1ubuntu0.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here