VDB
DEBIAN-CVE-2025-48041
DEBIAN-CVE-2025-48041
PUBLISHED
CVSS 7.099999904632568 HIGH
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15, corresponding to ssh from 3.0.1 before 5.3.3, 5.2.11.3 and 5.1.4.12.
Risk Scores
CVSS 4.0
7.099999904632568
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | erlang | 1:27.3.4.1+dfsg-1, 0 |
| Debian:12 | erlang | 1:25.2.3+dfsg-1+deb12u1, 1:25.2.3+dfsg-1+deb12u2, 0 |
| Debian:13 | erlang | 1:27.3.4.1+dfsg-1, 0 |
Timeline
- Sep 11, 2025 CVE Published
- Sep 1, 2026 CVE Updated