(nvd.nist.gov)

198 points kimi | 1 comments | 17 Apr 25 13:29 UTC | HN request time: 0.209s | source

Show context

throwawaymaths ◴[17 Apr 25 16:05 UTC] No.43718779[source]▶

most Elixir deployments are probably unaffected (obviously, please please check to be sure), as SSH is turned off by default.

https://paraxial.io/blog/erlang-ssh

replies(2): >>43719778 #>>43720031 #

1. giraffe_lady ◴[17 Apr 25 17:22 UTC] No.43719778[source]▶

>>43718779 #

This is also true of erlang right? This module is part of the stdlib but if you haven't implemented access using it it's "turned off" in the same way any other libraries you aren't using are.

↑

Unauthenticated Remote Code Execution in Erlang/OTP SSH