VULNERABILITY INTELLIGENCE
CVE-2025-48041
EPSS probability0.39%
CISA KEVNot currently listed
Published2025-09-11
Last modified2026-07-24
Description
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15, corresponding to ssh from 3.0.1 before 5.3.3, 5.2.11.3 and 5.1.4.12.
Weakness classification
- 6b3ad84c-e1a6-4bf7-a703-f496b71e49db: CWE-400