Threats Tagged 'cve-2026-73812'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple erlang27 packages, addressing several vulnerabilities. The update provides bug fixes and enhancements for these packages across aarch64 and x86_64 architectures. The advisory references multiple CVEs related to these packages and indicates a high severity level. A patch is available to address these issues.

CVE-2026-73812 is a high-severity vulnerability in Erlang OTP's HTTP server (httpd) involving inconsistent interpretation of HTTP requests, specifically HTTP request/response smuggling. The vulnerability occurs because the httpd function check_header/3 rejects duplicate Content-Length headers but does not check for the simultaneous presence of Transfer-Encoding and Content-Length headers, which RFC 9112 §6.3 identifies as a probable smuggling attempt. This can lead to desynchronization between front-end and back-end HTTP processing when a Content-Length-preferring front-end is paired with a chunked-preferring back-end. Multiple OTP and inets versions are affected. No explicit patch information is provided.