Lukas Backström

Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Denial of service via exponential certificate policy tree growth in path validation

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

DTLS server cookie bypass during startup window due to empty initial cookie secret

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

SSH SFTP server denial of service via extended channel data infinite loop