Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote attacker to degrade availability by supplying a URI whose port component is a very long run of digits. uri_string:get_port/1 passes the port substring to binary_to_integer/1 with no length bound, catching only error:badarg, so a syntactically valid port of up to roughly 1.26 million digits converts successfully and costs the calling process hundreds of milliseconds of arbitrary-precision arithmetic. The conversion is reached from every authority-parsing path in uri_string:parse/1, including the host, registered-name, and IPv4 and IPv6 forms. parse/1 is the documented interface for parsing URIs, so any application that parses an attacker-supplied URI is exposed without further configuration. The conversion function is documented to accept integers of any size, so bounding the input is the caller's responsibility. This issue affects OTP from OTP 21.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to stdlib from 3.5 before 6.2.2.5, 7.3.0.2, and 8.0.4.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

An update of the erlang package has been released.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6580 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6580-1                   security@debian.org     https://www.debian.org/security/                                  Aron Xu     October 23, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : erlang     CVE ID         : CVE-2026-55951 CVE-2026-59696 CVE-2026-65634 CVE-2026-66357                      CVE-2026-66835 CVE-2026-68956 CVE-2026-69664 CVE-2026-70399                      CVE-2026-70405 CVE-2026-70409 CVE-2026-71380 CVE-2026-73270                      CVE-2026-73276 CVE-2026-73812 CVE-2026-74835 CVE-2026-74994                      CVE-2026-75538 CVE-2026-89422

    Several vulnerabilities were discovered in Erlang/OTP, a programming     language and runtime environment. These issues could result in denial of     service, HTTP request smuggling, or bypass of authentication and access     restrictions, including TLS server impersonation.

    The affected components include the HTTP client and server, SSH, TLS,     ASN.1 decoding, the network driver, and URI, LDAP and SNMP parsing. The     update tightens protocol validation and HTTP/SSH resource limits.
    Applications relying on previously permissive behavior may need     adjustment.

    For the stable distribution (trixie), these problems have been fixed in     version 1:27.3.4.1+dfsg-1+deb13u4.

    We recommend that you upgrade your erlang packages.

    For the detailed security status of erlang please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/erlang

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP stdlib allows a remote     attacker to degrade availability by supplying a URI whose port component is a very long run of digits.
    uri_string:get_port/1 passes the port substring to binary_to_integer/1 with no length bound, catching only     error:badarg, so a syntactically valid port of up to roughly 1.26 million digits converts successfully and     costs the calling process hundreds of milliseconds of arbitrary-precision arithmetic. The conversion is     reached from every authority-parsing path in uri_string:parse/1, including the host, registered-name, and     IPv4 and IPv6 forms. parse/1 is the documented interface for parsing URIs, so any application that parses     an attacker-supplied URI is exposed without further configuration. The conversion function is documented     to accept integers of any size, so bounding the input is the caller's responsibility. This issue affects     OTP from OTP 21.0 before OTP 27.3.4.17, OTP 28.5.0.6, and OTP 29.0.6, corresponding to stdlib from 3.5     before 6.2.2.5, 7.3.0.2, and 8.0.4. (CVE-2026-59696)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e9dfc357-a63f-11f1-9195-4c526214c986 advisory.

    The Erlang/OTP project reports:
    OTP 29.0.6, 28.5.0.6 and 27.3.4.17 fix the following               issues, most of them in the inets httpd and httpc               implementations:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
375628	Photon OS 5.0: Erlang PHSA-2026-5.0-91-0958	Nessus	PhotonOS Local Security Checks	Local	critical
371200	Debian dsa-6580 : erlang - security update	Nessus	Debian Local Security Checks	Local	critical
342686	Linux Distros Unpatched Vulnerability : CVE-2026-59696	Nessus	Misc.	Local	medium
342490	FreeBSD : Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap (e9dfc357-a63f-11f1-9195-4c526214c986)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2026-59696

medium

Tenable Plugins

Coming Soon

critical

critical

medium

high