critical9.8
CVE-2016-10253
An issue was discovered in Erlang/OTP 18.x.
Impact
An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Erlang | Erlang\/Otp | Versions 18.0, 18.0.1, 18.0.2, 18.0.3, 18.1, 18.1.1 |