CVE-2026-59696
Description
A flaw was found in Erlang/OTP stdlib. A remote attacker can exploit an improper validation of specified quantity in input vulnerability by supplying a Uniform Resource Identifier (URI) with an excessively long port component. This can cause the uri_string:get_port/1 function to pass a very long string of digits to binary_to_integer/1 without proper length bounds. Consequently, the system performs hundreds of milliseconds of arbitrary-precision arithmetic, leading to a degradation of availability and a Denial of Service (DoS) for applications parsing attacker-supplied URIs.
Statement
Red Hat Product Security has determined that Erlang/OTP versions shipped in hummingbird-1 (version 27.3.4.19) and openstack-13 (version 18.3.4.11) are not affected by this vulnerability. The hummingbird-1 version includes the fix (>= 27.3.4.17), and openstack-13 ships a version (18.x) that predates the introduction of the vulnerability in OTP 21.0. The remaining OpenStack releases (16.2, 17.1, 18.0) ship affected versions but the impact is limited to a temporary denial of service requiring attacker-controlled URI input.
Mitigation
Applications can mitigate this vulnerability by validating URI port lengths before passing them to uri_string:parse/1, or by upgrading to patched Erlang/OTP versions: 27.3.4.17+, 28.5.0.6+, or 29.0.6+.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.3 | N/A | N/A |
| Attack Vector | Network | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | None | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | Low | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
