Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-10253
7.5
HIGHCVSS v2
Published
March 18, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.
erlang/otp
GitHubErlang/OTP
GitHubErlang/OTP= 18.3, = 18.0.1, = 18.1.3, = 18.3.4.3, = 18.3.4.5, = 18.2, = 18.2.4, = 18.2.4.1, = 18.3.1, = 18.0.3, = 18.1.1, = 18.2.2, = 18.3.4.1, = 18.1.4, = 18.1.5, = 18.3.4.4, = 18.1, = 18.1.2, = 18.2.1, = 18.2.3, = 18.3.4, = 18.3.4.2, = 18.0, = 18.0.2, = 18.3.2, = 18.3.3, = 19.3.6.8, = 19.3.6.6, = 19.3.6, = 19.1.6.1, = 19.3, = 19.2.2, = 19.1.2, = 19.1, = 19.0, = 19.3.4, = 19.3.3, = 19.3.2, = 19.3.1, = 19.0.6, = 19.0.5, = 19.0.4, = 19.3.6.9, = 19.3.6.7, = 19.3.6.1, = 19.3.5, = 19.2.3, = 19.2.1, = 19.1.3, = 19.1.1, = 19.0.7, = 19.3.6.5, = 19.2.3.1, = 19.3.6.4, = 19.3.6.3, = 19.3.6.2, = 19.2, = 19.1.6, = 19.1.5, = 19.1.4, = 19.0.1, = 19.0.3, = 19.0.2NVD