VYPR
← All advisories
Unrated severityOSV Advisory· Published Feb 4, 2019· Updated Aug 5, 2024

CVE-2019-1000014

CVE-2019-1000014

Description

Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via Victim fetches packages from malicious/compromised mirror. This vulnerability appears to have been fixed in 3.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Erlang/Rebar3OSV2 versions
    3.7.0, 3.7.1, 3.7.2, …+ 1 more
    • (no CPE)range: 3.7.0, 3.7.1, 3.7.2, …
    • (no CPE)range: >=3.7.0 <=3.7.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.