CVE-2015-2774
Medium
Description
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
SeverityMedium
CVSS5.9
Exploit probability—
Product
Erlang\/otp
PublishedApr 7, 2016
First seenApr 7, 2016
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| erlang erlang\/otp | v ≤ 18.0 | — |
| oracle solaris | 11.2 | — |
| opensuse opensuse | 13.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.