Threats Tagged 'cve-2026-70399'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple erlang27 packages, addressing several vulnerabilities. The update provides bug fixes and enhancements for these packages across aarch64 and x86_64 architectures. The advisory references multiple CVEs related to these packages and indicates a high severity level. A patch is available to address these issues.

A vulnerability in the Erlang/OTP inets httpd server allows unauthenticated remote attackers to cause denial of service by opening and holding a large number of simultaneous connections. The issue arises because the server does not enforce the documented default limit of 150 max_clients unless explicitly configured, allowing unlimited connections that exhaust system resources. This affects multiple Erlang/OTP versions prior to specific patched releases. A fix is available and should be applied to mitigate the risk.

CVE-2026-70399 is a denial-of-service vulnerability in Erlang/OTP inets httpd caused by allocation of resources without limits or throttling. An unauthenticated remote attacker can open and hold many simultaneous connections, exhausting server resources. The default max_clients limit of 150 is not applied if the option is not explicitly set, allowing unlimited connections. This affects multiple OTP and inets versions prior to specific fixed releases.