https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:21:02.650914+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-74835 fkie_cve-2026-74835 2026-09-29T06:21:03.917778+00:00

The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request.

This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.

 https://vulnerability.circl.lu/vuln/msrc_cve-2026-74835 msrc_CVE-2026-74835 — inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception 2026-09-29T06:21:03.917940+00:00 msrc_CVE-2026-74835 https://vulnerability.circl.lu/vuln/rhsa-2026:62531 RHSA-2026:62531 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-09-29T06:21:03.917979+00:00

inets: Erlang/OTP inets httpd: Directory protection bypass allows information disclosure otp: inets: Erlang/OTP inets httpd: Denial of Service via malformed chunked HTTP request inets: inets: Denial of Service via unenforced connection limit eldap: eldap: Denial of Service via long LDAP referral URL port OTP: inets: inets: HTTP Request Smuggling allows bypassing security controls inets: httpd: otp: inets httpd: Denial of Service due to memory exhaustion via unenforced body-size limit inets: otp: inets httpd mod_auth: Authentication Bypass via Directory Namespace Collapse

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-74835 UBUNTU-CVE-2026-74835 2026-09-29T06:21:03.918025+00:00

Affected: Ubuntu:Pro:14.04:LTS: erlang, Ubuntu:Pro:16.04:LTS: erlang, Ubuntu:Pro:18.04:LTS: erlang, Ubuntu:Pro:20.04:LTS: erlang, Ubuntu:22.04:LTS: erlang, Ubuntu:24.04:LTS: erlang, Ubuntu:26.04:LTS: erlang

The inets application HTTP server httpd fails to enforce a configured body-size limit on chunked request. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.