Fabian Bäumer's Avatar

Fabian Bäumer

@skrillor.bsky.social

PhD Student @ruhr-uni-bochum.de | 🐢 Terrapin Attack | Interested in anything related to SSH and protocol security in general | Mastodon: @Skrillor@infosec.exchange

36 Followers  |  103 Following  |  3 Posts  |  Joined: 21.01.2025  |  1.5486

Latest posts by skrillor.bsky.social on Bluesky

We found a new vulnerability in TLS. It's a variant of the ALPACA attack that bypasses current countermeasures. Relativly low impact - but great insight! Check it out: opossum-attack.com

08.07.2025 12:26 — 👍 12    🔁 8    💬 1    📌 0
Unauthenticated Remote Code Execution in Erlang/OTP SSH ### Summary A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SS...

Affected versions:

<= OTP-27.3.2
<= OTP-26.2.5.10
<= OTP-25.3.2.19.

Fixed versions are OTP-27.3.3, OTP-26.2.5.11, OTP-25.3.2.20.

Link to the security advisory over on GitHub: github.com/erlang/otp/s...

16.04.2025 17:15 — 👍 2    🔁 0    💬 0    📌 0

Mitigation:

To mitigate this issue, please update to the latest version of Erlang/OTP as soon as possible. As an immediate workaround, prevent access via appropriate firewall rules.

16.04.2025 17:15 — 👍 2    🔁 0    💬 1    📌 0

We (@lambdafu.bsky.social & me) found a critical security vulnerability in the #Erlang/OTP SSH daemon that allow attackers to execute arbitrary code via network access on devices running Erlang/OTP SSH servers.

This vulnerability is #CVE-2025-32433, patches out now. Estimated CVSSv3 10.

16.04.2025 17:15 — 👍 8    🔁 3    💬 1    📌 0

@skrillor is following 20 prominent accounts