Vulnerability-Lookup

CVE-2026-48859 (GCVE-0-2026-48859)

Vulnerability from cvelistv5 – Published: 2026-06-10 14:35 – Updated: 2026-09-08 01:05

Title

SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

Summary

Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames. The user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability. This vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl. This issue affects OTP from OTP 29.0 before OTP 29.0.2, corresponding to ssh from 6.0 before 6.0.1.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 16:19 UTC

CWE

CWE-208 - Observable Timing Discrepancy

Assigner

EEF CNA under the mitre root

CNA scorecard A 97/100 over 341 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/erlang/otp/security/advisories…	vendor-advisoryrelated
https://cna.erlef.org/cves/CVE-2026-48859.html	related
https://osv.dev/vulnerability/EEF-CVE-2026-48859	related
https://www.erlang.org/doc/system/versions.html#o…	x_version-scheme
https://github.com/erlang/otp/commit/c342092ef4b3…	patch

Impacted products

3 products

Vendor	Product	Version
Erlang	OTP	Affected: 29.0 , < 29.0.2 (otp) cpe:2.3:a:erlang:erlang\/otp::::::::
Erlang	OTP	Affected: 6.0 , < 6.0.1 (otp) cpe:2.3:a:erlang:erlang\/otp::::::::
Erlang	OTP	Affected: 032d1bc9491a3975c68faf9bc7776115d6ae3005 , < c342092ef4b369bb409d5b71ac8fd83bab74aedf (git) cpe:2.3:a:erlang:erlang\/otp::::::::

Credits

Zhang Delong Jakub Witczak Ingela Anderton Andin Michał Wąsowski

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-48859",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T16:19:16.914933Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-10T16:19:43.145Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "otp",
          "packageURL": "pkg:software-id/erlang.org/otp",
          "product": "OTP",
          "programFiles": [
            "lib/ssh/src/ssh_auth.erl",
            "lib/ssh/src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "29.0.2",
              "status": "affected",
              "version": "29.0",
              "versionType": "otp"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "ssh",
          "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp\u0026vcs_url=git%20https:%2F%2Fgithub.com%2Ferlang%2Fotp.git",
          "product": "OTP",
          "programFiles": [
            "src/ssh_auth.erl",
            "src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "repo": "https://github.com/erlang/otp",
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "6.0.1",
              "status": "affected",
              "version": "6.0",
              "versionType": "otp"
            }
          ]
        },
        {
          "collectionURL": "https://github.com",
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "erlang/otp",
          "packageURL": "pkg:github/erlang/otp",
          "product": "OTP",
          "programFiles": [
            "lib/ssh/src/ssh_auth.erl",
            "lib/ssh/src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "repo": "https://github.com/erlang/otp",
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf",
              "status": "affected",
              "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005",
              "versionType": "git"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe SSH daemon must be configured with the \u003ccode\u003euser_passwords\u003c/code\u003e or \u003ccode\u003epassword\u003c/code\u003e option for password authentication. Systems using the \u003ccode\u003epwdfun\u003c/code\u003e option instead are not affected.\u003c/p\u003e"
            },
            {
              "base64": false,
              "type": "text/markdown",
              "value": "The SSH daemon must be configured with the `user_passwords` or `password` option for password authentication. Systems using the `pwdfun` option instead are not affected."
            }
          ],
          "value": "The SSH daemon must be configured with the user_passwords or password option for password authentication. Systems using the pwdfun option instead are not affected."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "29.0.2",
                  "versionStartIncluding": "29.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Zhang Delong"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Jakub Witczak"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Ingela Anderton Andin"
        },
        {
          "lang": "en",
          "type": "remediation reviewer",
          "value": "Micha\u0142 W\u0105sowski"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eObservable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\u003c/p\u003e\n\u003cp\u003eWhen the SSH daemon is configured with the \u003ccode\u003euser_passwords\u003c/code\u003e or \u003ccode\u003epassword\u003c/code\u003e option, \u003ccode\u003essh_auth:check_password/3\u003c/code\u003e performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the \u003ccode\u003essh_options:get_password_option/2\u003c/code\u003e path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003euser_passwords\u003c/code\u003e and \u003ccode\u003epassword\u003c/code\u003e options are documented as intended for test purposes; the recommended alternative is \u003ccode\u003epwdfun\u003c/code\u003e, which is not affected by this vulnerability.\u003c/p\u003e\n\u003cp\u003eThis vulnerability is associated with program files \u003ccode\u003elib/ssh/src/ssh_auth.erl\u003c/code\u003e and \u003ccode\u003elib/ssh/src/ssh_options.erl\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThis issue affects OTP from OTP\u0026nbsp;29.0 before OTP\u0026nbsp;29.0.2, corresponding to ssh from 6.0 before 6.0.1.\u003c/p\u003e"
            },
            {
              "base64": false,
              "type": "text/markdown",
              "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the `user_passwords` or `password` option, `ssh_auth:check_password/3` performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the `ssh_options:get_password_option/2` path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe `user_passwords` and `password` options are documented as intended for test purposes; the recommended alternative is `pwdfun`, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files `lib/ssh/src/ssh_auth.erl` and `lib/ssh/src/ssh_options.erl`.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
            }
          ],
          "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-116",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-116 Excavation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-208",
              "description": "CWE-208 Observable Timing Discrepancy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-08T01:05:48.773Z",
        "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "shortName": "EEF"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "related"
          ],
          "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"
        },
        {
          "tags": [
            "x_version-scheme"
          ],
          "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cul\u003e\n\u003cli\u003eUse the \u003ccode\u003epwdfun\u003c/code\u003e option instead of \u003ccode\u003euser_passwords\u003c/code\u003e for password authentication. The \u003ccode\u003epwdfun\u003c/code\u003e callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\u003c/li\u003e\n\u003cli\u003eRestrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.\u003c/li\u003e\n\u003c/ul\u003e"
            },
            {
              "base64": false,
              "type": "text/markdown",
              "value": "* Use the `pwdfun` option instead of `user_passwords` for password authentication. The `pwdfun` callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."
            }
          ],
          "value": "* Use the pwdfun option instead of user_passwords for password authentication. The pwdfun callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
    "assignerShortName": "EEF",
    "cveId": "CVE-2026-48859",
    "datePublished": "2026-06-10T14:35:43.553Z",
    "dateReserved": "2026-05-25T20:44:10.697Z",
    "dateUpdated": "2026-09-08T01:05:48.773Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-48859",
      "date": "2026-10-29",
      "epss": "0.00354",
      "percentile": "0.29096"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "modules": [
                  "ssh_auth",
                  "ssh_options"
                ],
                "packageName": "otp",
                "packageURL": "pkg:software-id/erlang.org/otp",
                "product": "OTP",
                "programFiles": [
                  "lib/ssh/src/ssh_auth.erl",
                  "lib/ssh/src/ssh_options.erl"
                ],
                "programRoutines": [
                  {
                    "name": "ssh_auth:check_password/3"
                  },
                  {
                    "name": "ssh_options:get_password_option/2"
                  }
                ],
                "vendor": "Erlang",
                "versions": [
                  {
                    "lessThan": "29.0.2",
                    "status": "affected",
                    "version": "29.0",
                    "versionType": "otp"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "modules": [
                  "ssh_auth",
                  "ssh_options"
                ],
                "packageName": "ssh",
                "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp\u0026vcs_url=git%20https:%2F%2Fgithub.com%2Ferlang%2Fotp.git",
                "product": "OTP",
                "programFiles": [
                  "src/ssh_auth.erl",
                  "src/ssh_options.erl"
                ],
                "programRoutines": [
                  {
                    "name": "ssh_auth:check_password/3"
                  },
                  {
                    "name": "ssh_options:get_password_option/2"
                  }
                ],
                "repo": "https://github.com/erlang/otp",
                "vendor": "Erlang",
                "versions": [
                  {
                    "lessThan": "6.0.1",
                    "status": "affected",
                    "version": "6.0",
                    "versionType": "otp"
                  }
                ]
              },
              {
                "collectionURL": "https://github.com",
                "cpes": [
                  "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unaffected",
                "modules": [
                  "ssh_auth",
                  "ssh_options"
                ],
                "packageName": "erlang/otp",
                "packageURL": "pkg:github/erlang/otp",
                "product": "OTP",
                "programFiles": [
                  "lib/ssh/src/ssh_auth.erl",
                  "lib/ssh/src/ssh_options.erl"
                ],
                "programRoutines": [
                  {
                    "name": "ssh_auth:check_password/3"
                  },
                  {
                    "name": "ssh_options:get_password_option/2"
                  }
                ],
                "repo": "https://github.com/erlang/otp",
                "vendor": "Erlang",
                "versions": [
                  {
                    "lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf",
                    "status": "affected",
                    "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005",
                    "versionType": "git"
                  }
                ]
              }
            ],
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4AB1573-4E81-4338-B65A-B3C94C7249FA",
                    "versionEndExcluding": "29.0.2",
                    "versionStartIncluding": "29.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:erlang:erlang\\/ssh:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BF9A1F8-83F5-4BEB-A972-3AF5B15947EF",
                    "versionEndExcluding": "6.0.1",
                    "versionStartIncluding": "6.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad de discrepancia de tiempo observable en Erlang/OTP ssh (m\u00f3dulos ssh_auth, ssh_options) permite la enumeraci\u00f3n remota de nombres de usuario no autenticados a trav\u00e9s de un canal lateral de tiempo en la autenticaci\u00f3n de contrase\u00f1a.\n\nCuando el demonio SSH est\u00e1 configurado con la opci\u00f3n user_passwords o password, ssh_auth:check_password/3 realiza un c\u00e1lculo PBKDF2-SHA256 con 600.000 iteraciones (~300ms) para nombres de usuario v\u00e1lidos, pero regresa inmediatamente (~0ms) para nombres de usuario inv\u00e1lidos a trav\u00e9s de la ruta ssh_options:get_password_option/2. Esta diferencia de tiempo es detectable en un solo intento de autenticaci\u00f3n y permite a un atacante no autenticado distinguir nombres de usuario v\u00e1lidos de inv\u00e1lidos.\n\nLas opciones user_passwords y password est\u00e1n documentadas como destinadas a fines de prueba; la alternativa recomendada es pwdfun, que no se ve afectada por esta vulnerabilidad.\n\nEsta vulnerabilidad est\u00e1 asociada con los archivos de programa lib/ssh/src/ssh_auth.erl y lib/ssh/src/ssh_options.erl.\n\nEste problema afecta a OTP desde OTP 29.0 antes de 29.0.2 correspondiente a ssh desde 6.0 antes de 6.0.1."
          }
        ],
        "id": "CVE-2026-48859",
        "lastModified": "2026-10-26T11:10:00.157",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 1.4,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-48859",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T16:19:16.914933Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-06-10T16:17:12.373",
        "references": [
          {
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "tags": [
              "Mitigation",
              "Third Party Advisory"
            ],
            "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"
          },
          {
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "tags": [
              "Patch"
            ],
            "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"
          },
          {
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "tags": [
              "Mitigation",
              "Vendor Advisory"
            ],
            "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"
          },
          {
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "tags": [
              "Mitigation",
              "Third Party Advisory"
            ],
            "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"
          },
          {
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "tags": [
              "Product"
            ],
            "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
          }
        ],
        "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-208"
              }
            ],
            "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-48859",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-06-10T16:19:16.914933Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-06-10T16:19:38.063Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "modules": [
                "ssh_auth",
                "ssh_options"
              ],
              "packageName": "otp",
              "packageURL": "pkg:software-id/erlang.org/otp",
              "product": "OTP",
              "programFiles": [
                "lib/ssh/src/ssh_auth.erl",
                "lib/ssh/src/ssh_options.erl"
              ],
              "programRoutines": [
                {
                  "name": "ssh_auth:check_password/3"
                },
                {
                  "name": "ssh_options:get_password_option/2"
                }
              ],
              "vendor": "Erlang",
              "versions": [
                {
                  "lessThan": "29.0.2",
                  "status": "affected",
                  "version": "29.0",
                  "versionType": "otp"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "modules": [
                "ssh_auth",
                "ssh_options"
              ],
              "packageName": "ssh",
              "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp\u0026vcs_url=git%20https:%2F%2Fgithub.com%2Ferlang%2Fotp.git",
              "product": "OTP",
              "programFiles": [
                "src/ssh_auth.erl",
                "src/ssh_options.erl"
              ],
              "programRoutines": [
                {
                  "name": "ssh_auth:check_password/3"
                },
                {
                  "name": "ssh_options:get_password_option/2"
                }
              ],
              "repo": "https://github.com/erlang/otp",
              "vendor": "Erlang",
              "versions": [
                {
                  "lessThan": "6.0.1",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "otp"
                }
              ]
            },
            {
              "collectionURL": "https://github.com",
              "cpes": [
                "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "modules": [
                "ssh_auth",
                "ssh_options"
              ],
              "packageName": "erlang/otp",
              "packageURL": "pkg:github/erlang/otp",
              "product": "OTP",
              "programFiles": [
                "lib/ssh/src/ssh_auth.erl",
                "lib/ssh/src/ssh_options.erl"
              ],
              "programRoutines": [
                {
                  "name": "ssh_auth:check_password/3"
                },
                {
                  "name": "ssh_options:get_password_option/2"
                }
              ],
              "repo": "https://github.com/erlang/otp",
              "vendor": "Erlang",
              "versions": [
                {
                  "lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf",
                  "status": "affected",
                  "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005",
                  "versionType": "git"
                }
              ]
            }
          ],
          "configurations": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eThe SSH daemon must be configured with the \u003ccode\u003euser_passwords\u003c/code\u003e or \u003ccode\u003epassword\u003c/code\u003e option for password authentication. Systems using the \u003ccode\u003epwdfun\u003c/code\u003e option instead are not affected.\u003c/p\u003e"
                },
                {
                  "base64": false,
                  "type": "text/markdown",
                  "value": "The SSH daemon must be configured with the `user_passwords` or `password` option for password authentication. Systems using the `pwdfun` option instead are not affected."
                }
              ],
              "value": "The SSH daemon must be configured with the user_passwords or password option for password authentication. Systems using the pwdfun option instead are not affected."
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "29.0.2",
                      "versionStartIncluding": "29.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ],
              "operator": "AND"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Zhang Delong"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Jakub Witczak"
            },
            {
              "lang": "en",
              "type": "remediation reviewer",
              "value": "Ingela Anderton Andin"
            },
            {
              "lang": "en",
              "type": "remediation reviewer",
              "value": "Micha\u0142 W\u0105sowski"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eObservable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\u003c/p\u003e\n\u003cp\u003eWhen the SSH daemon is configured with the \u003ccode\u003euser_passwords\u003c/code\u003e or \u003ccode\u003epassword\u003c/code\u003e option, \u003ccode\u003essh_auth:check_password/3\u003c/code\u003e performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the \u003ccode\u003essh_options:get_password_option/2\u003c/code\u003e path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003euser_passwords\u003c/code\u003e and \u003ccode\u003epassword\u003c/code\u003e options are documented as intended for test purposes; the recommended alternative is \u003ccode\u003epwdfun\u003c/code\u003e, which is not affected by this vulnerability.\u003c/p\u003e\n\u003cp\u003eThis vulnerability is associated with program files \u003ccode\u003elib/ssh/src/ssh_auth.erl\u003c/code\u003e and \u003ccode\u003elib/ssh/src/ssh_options.erl\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThis issue affects OTP from OTP\u0026nbsp;29.0 before OTP\u0026nbsp;29.0.2, corresponding to ssh from 6.0 before 6.0.1.\u003c/p\u003e"
                },
                {
                  "base64": false,
                  "type": "text/markdown",
                  "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the `user_passwords` or `password` option, `ssh_auth:check_password/3` performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the `ssh_options:get_password_option/2` path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe `user_passwords` and `password` options are documented as intended for test purposes; the recommended alternative is `pwdfun`, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files `lib/ssh/src/ssh_auth.erl` and `lib/ssh/src/ssh_options.erl`.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
                }
              ],
              "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-116",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-116 Excavation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-208",
                  "description": "CWE-208 Observable Timing Discrepancy",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-08T01:05:48.773Z",
            "orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
            "shortName": "EEF"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory",
                "related"
              ],
              "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"
            },
            {
              "tags": [
                "related"
              ],
              "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"
            },
            {
              "tags": [
                "related"
              ],
              "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"
            },
            {
              "tags": [
                "x_version-scheme"
              ],
              "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration",
          "workarounds": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cul\u003e\n\u003cli\u003eUse the \u003ccode\u003epwdfun\u003c/code\u003e option instead of \u003ccode\u003euser_passwords\u003c/code\u003e for password authentication. The \u003ccode\u003epwdfun\u003c/code\u003e callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\u003c/li\u003e\n\u003cli\u003eRestrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.\u003c/li\u003e\n\u003c/ul\u003e"
                },
                {
                  "base64": false,
                  "type": "text/markdown",
                  "value": "* Use the `pwdfun` option instead of `user_passwords` for password authentication. The `pwdfun` callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."
                }
              ],
              "value": "* Use the pwdfun option instead of user_passwords for password authentication. The pwdfun callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "assignerShortName": "EEF",
        "cveId": "CVE-2026-48859",
        "datePublished": "2026-06-10T14:35:43.553Z",
        "dateReserved": "2026-05-25T20:44:10.697Z",
        "dateUpdated": "2026-09-08T01:05:48.773Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-48859

Vulnerability from fkie_nvd - Published: 2026-06-10 16:17 - Updated: 2026-10-26 11:10

Severity

5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

References

URL	Tags
6b3ad84c-e1a6-4bf7-a703-f496b71e49db	https://cna.erlef.org/cves/CVE-2026-48859.html	Mitigation, Third Party Advisory
6b3ad84c-e1a6-4bf7-a703-f496b71e49db	https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf	Patch
6b3ad84c-e1a6-4bf7-a703-f496b71e49db	https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4	Mitigation, Vendor Advisory
6b3ad84c-e1a6-4bf7-a703-f496b71e49db	https://osv.dev/vulnerability/EEF-CVE-2026-48859	Mitigation, Third Party Advisory
6b3ad84c-e1a6-4bf7-a703-f496b71e49db	https://www.erlang.org/doc/system/versions.html#order-of-versions	Product

Impacted products

	Vendor	Product	Version
	erlang	erlang\/otp	*
	erlang	erlang\/ssh	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "otp",
          "packageURL": "pkg:software-id/erlang.org/otp",
          "product": "OTP",
          "programFiles": [
            "lib/ssh/src/ssh_auth.erl",
            "lib/ssh/src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "29.0.2",
              "status": "affected",
              "version": "29.0",
              "versionType": "otp"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "ssh",
          "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp\u0026vcs_url=git%20https:%2F%2Fgithub.com%2Ferlang%2Fotp.git",
          "product": "OTP",
          "programFiles": [
            "src/ssh_auth.erl",
            "src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "repo": "https://github.com/erlang/otp",
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "6.0.1",
              "status": "affected",
              "version": "6.0",
              "versionType": "otp"
            }
          ]
        },
        {
          "collectionURL": "https://github.com",
          "cpes": [
            "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "modules": [
            "ssh_auth",
            "ssh_options"
          ],
          "packageName": "erlang/otp",
          "packageURL": "pkg:github/erlang/otp",
          "product": "OTP",
          "programFiles": [
            "lib/ssh/src/ssh_auth.erl",
            "lib/ssh/src/ssh_options.erl"
          ],
          "programRoutines": [
            {
              "name": "ssh_auth:check_password/3"
            },
            {
              "name": "ssh_options:get_password_option/2"
            }
          ],
          "repo": "https://github.com/erlang/otp",
          "vendor": "Erlang",
          "versions": [
            {
              "lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf",
              "status": "affected",
              "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005",
              "versionType": "git"
            }
          ]
        }
      ],
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4AB1573-4E81-4338-B65A-B3C94C7249FA",
              "versionEndExcluding": "29.0.2",
              "versionStartIncluding": "29.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:erlang:erlang\\/ssh:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BF9A1F8-83F5-4BEB-A972-3AF5B15947EF",
              "versionEndExcluding": "6.0.1",
              "versionStartIncluding": "6.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de discrepancia de tiempo observable en Erlang/OTP ssh (m\u00f3dulos ssh_auth, ssh_options) permite la enumeraci\u00f3n remota de nombres de usuario no autenticados a trav\u00e9s de un canal lateral de tiempo en la autenticaci\u00f3n de contrase\u00f1a.\n\nCuando el demonio SSH est\u00e1 configurado con la opci\u00f3n user_passwords o password, ssh_auth:check_password/3 realiza un c\u00e1lculo PBKDF2-SHA256 con 600.000 iteraciones (~300ms) para nombres de usuario v\u00e1lidos, pero regresa inmediatamente (~0ms) para nombres de usuario inv\u00e1lidos a trav\u00e9s de la ruta ssh_options:get_password_option/2. Esta diferencia de tiempo es detectable en un solo intento de autenticaci\u00f3n y permite a un atacante no autenticado distinguir nombres de usuario v\u00e1lidos de inv\u00e1lidos.\n\nLas opciones user_passwords y password est\u00e1n documentadas como destinadas a fines de prueba; la alternativa recomendada es pwdfun, que no se ve afectada por esta vulnerabilidad.\n\nEsta vulnerabilidad est\u00e1 asociada con los archivos de programa lib/ssh/src/ssh_auth.erl y lib/ssh/src/ssh_options.erl.\n\nEste problema afecta a OTP desde OTP 29.0 antes de 29.0.2 correspondiente a ssh desde 6.0 antes de 6.0.1."
    }
  ],
  "id": "CVE-2026-48859",
  "lastModified": "2026-10-26T11:10:00.157",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-48859",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-06-10T16:19:16.914933Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-06-10T16:17:12.373",
  "references": [
    {
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "tags": [
        "Mitigation",
        "Third Party Advisory"
      ],
      "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"
    },
    {
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "tags": [
        "Patch"
      ],
      "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"
    },
    {
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"
    },
    {
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "tags": [
        "Mitigation",
        "Third Party Advisory"
      ],
      "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"
    },
    {
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "tags": [
        "Product"
      ],
      "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"
    }
  ],
  "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-208"
        }
      ],
      "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
      "type": "Secondary"
    }
  ]
}

UBUNTU-CVE-2026-48859 (CVE-2026-48859)

Vulnerability from osv_ubuntu – Published: 2026-06-10 16:17 – Updated: 2026-10-06 20:53 – Source website

Details

Severity

6.3 (Medium)


                    
                      CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

5.3 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-48859	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-48859	REPORT
	https://cna.erlef.org/cves/CVE-2026-48859.html	REPORT
	https://osv.dev/vulnerability/EEF-CVE-2026-48859	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "erlang",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-asn1",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-base",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-common-test",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-crypto",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-debugger",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-dialyzer",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-diameter",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-edoc",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-eldap",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-et",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-eunit",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-examples",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-ftp",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-inets",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-jinterface",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-megaco",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-mnesia",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-mode",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-nox",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-observer",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-odbc",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-os-mon",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-parsetools",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-public-key",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-reltool",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-runtime-tools",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-snmp",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-src",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-ssh",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-ssl",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-syntax-tools",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-tftp",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-tools",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-wx",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-x11",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          },
          {
            "binary_name": "erlang-xmerl",
            "binary_version": "1:27.3.4.1+dfsg-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "erlang",
        "purl": "pkg:deb/ubuntu/erlang@1:27.3.4.1+dfsg-1ubuntu0.1?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:27.3+dfsg-1ubuntu1",
        "1:27.3+dfsg-1ubuntu1.1",
        "1:27.3.4.1+dfsg-1",
        "1:27.3.4.1+dfsg-1build1",
        "1:27.3.4.1+dfsg-1ubuntu0.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames. The user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability. This vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl. This issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1.",
  "id": "UBUNTU-CVE-2026-48859",
  "modified": "2026-10-06T20:53:30Z",
  "published": "2026-06-10T16:17:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-48859"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-48859"
    },
    {
      "type": "REPORT",
      "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"
    },
    {
      "type": "REPORT",
      "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-48859"
  ]
}

WID-SEC-W-2026-1887

Vulnerability from csaf_certbund - Published: 2026-06-10 22:00 - Updated: 2026-06-14 22:00

Summary

Erlang/OTP: Mehrere Schwachstellen

Severity

Mittel

Scope

7 vulnerabilities in this advisory, including CVE-2026-48859.

CVE-2026-48859

Known affected: 7 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-48859 (GCVE-0-2026-48859)

FKIE_CVE-2026-48859

UBUNTU-CVE-2026-48859 (CVE-2026-48859)

WID-SEC-W-2026-1887

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour