CVE-2025-32433
Fixed in a distro release ExploitedEPSS 99%CVSS 10.0
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
Products: erlang otp
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | erlang | 1:23.2.6+dfsg-1+deb11u2 |
| Debian 12 | erlang | 1:25.2.3+dfsg-1+deb12u1 |
| Debian 13 | erlang | 1:27.3.3+dfsg-1 |
| Debian 14 | erlang | 1:27.3.3+dfsg-1 |
| SUSE Enterprise Storage 7.1 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | erlang26 | 26.2.1-150300.7.11.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Manager Proxy 4.3 | erlang | 23.3.4.19-150300.3.20.1 |
| SUSE Manager Server 4.3 | erlang | 23.3.4.19-150300.3.20.1 |
| Ubuntu 20.04 LTS | erlang | 1:22.2.7+dfsg-1ubuntu0.5 |
| Ubuntu 22.04 LTS | erlang | 1:24.2.1+dfsg-1ubuntu0.4 |
| Ubuntu 24.04 LTS | erlang | 1:25.3.2.8+dfsg-1ubuntu4.3 |
| Ubuntu 25.04 | erlang | 1:27.3+dfsg-1ubuntu1.1 |
| Ubuntu Pro 16.04 LTS | erlang | 1:18.3-dfsg-1ubuntu3.1+esm1 |
| Ubuntu Pro 18.04 LTS | erlang | 1:20.2.2+dfsg-1ubuntu2+esm1 |
| openSUSE Leap 15.6 | erlang | 23.3.4.19-150300.3.20.1 |
| openSUSE Leap 15.6 | erlang26 | 26.2.1-150300.7.11.1 |