Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-yyfx-f783-fqgk

Summary Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP form OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.

Aliases

alias	CVE-2025-48040

Fixed_packages

url pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4

purl pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:25.2.3%252Bdfsg-1%252Bdeb12u4

url pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4?distro=trixie

purl pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:25.2.3%252Bdfsg-1%252Bdeb12u4%3Fdistro=trixie

url	pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.1%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie

url pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-aqqx-g7d3-1yfy

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-n6dc-39d1-83cr

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.1%252Bdfsg-1%252Bdeb13u2%3Fdistro=trixie

url	pkg:deb/debian/erlang@1:27.3.4.3%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.3%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.3%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/erlang@1:27.3.4.12%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.12%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.12%252Bdfsg-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1

purl pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-dccw-cx8r-r7a1

vulnerability	VCID-wsby-unw4-zqe7

vulnerability	VCID-yyfx-f783-fqgk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:23.2.6%252Bdfsg-1%252Bdeb11u1

url pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-dccw-cx8r-r7a1

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

vulnerability	VCID-yyfx-f783-fqgk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:23.2.6%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48040.json

reference_id

reference_type

scores

value	5.3
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-48040.json

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115091
reference_id	1115091
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115091

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2394521
reference_id	2394521
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2394521

Weaknesses

cwe_id	770
name	Allocation of Resources Without Limits or Throttling
description	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Exploits

Severity_range_score 5.3 - 5.3

Exploitability 0.5

Weighted_severity 4.8

Risk_score 2.4

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yyfx-f783-fqgk

Vulnerability Instance