CVE-2017-1000385

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding

published December 12, 2017

CVSS
—
EPSS
22%
Percentile
97.7
In the wild
Unconfirmed
What it is

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22098 · 97.7th percentile
Published
2017-12-12T21:00Z
EPSS history
Timeline
  • 12 DEC 21:00Z
    The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding
    cvelistv5