CVE-2026-55952
Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried…
Technology
Erlang/OTP
CVSS Score
7.5 / 10.0
Affected Versions
>=22.2 <27.3.4.14; >=28.0 <28.5.0.3; >=29.0 <29.0.3
Upstream Fix
See upstream advisory
Published
July 2, 2026
OSSeva Coverage
Fixed upstream
Description
The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes the session ticket handler process. An unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handl
Is your Erlang/OTP deployment affected?
If you're running >=22.2 <27.3.4.14; >=28.0 <28.5.0.3; >=29.0 <29.0.3, you need this patch. Book a discovery call to get covered.
View Erlang/OTP coverage →Get a quote
Running Erlang/OTP >=22.2 <27.3.4.14; >=28.0 <28.5.0.3; >=29.0 <29.0.3?
Send your work email and a senior engineer will tell you whether this CVE applies to your versions and who patches it. Reply within 1 business day.
Prefer to talk or read more first?