CVE-2014-1693
Fixed in a distro release EPSS 2%
Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recv_bin, (12) recv_chunk_start, (13) send, (14) send_bin, (15) send_chunk_start, (16) append_chunk_start, (17) append, or (18) append_bin command.
Products: erlang/otp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | erlang | 1:16.b.3.1-dfsg-3 |
| Debian 13 | erlang | 1:16.b.3.1-dfsg-3 |
| Debian 14 | erlang | 1:16.b.3.1-dfsg-3 |
| Ubuntu 14.04 LTS | erlang | 1:16.b.3-dfsg-1ubuntu2.2 |
| Ubuntu 16.04 LTS | erlang | 1:18.3-dfsg-1ubuntu3.1 |