CVE-2026-55952

The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tlshandshake13:handlepresharedkey/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tlsserversession_ticket:use/4, which crashes the session ticket handler process.

An unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected listener until the ssl application is restarted. TLS 1.2 connections are not affected.

This issue affects OTP from 22.2 before 29.0.3, 28.5.0.3 and 27.3.4.14 corresponding to ssl from 9.5 before 11.7.3, 11.6.0.3 and 11.2.12.10.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55952.json",
    "cna_assigner": "EEF",
    "cwe_ids": [
        "CWE-1284"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "9.5"
                },
                {
                    "fixed": "*"
                },
                {
                    "introduced": "22.2"
                },
                {
                    "fixed": "*"
                },
                {
                    "introduced": "339a279f02ce38a7b23010e56000613e19abb21f"
                },
                {
                    "fixed": "*"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/erlang/otp

Affected ranges

Type

GIT

Repo

https://github.com/erlang/otp

Events

Introduced

926f03ce5ba4f2156a36940d267a1a1e683484ff

Fixed

e9f49f57cef6e38fd13c4b0cee1eb5509ef471e8

Introduced

9e6f6742c4d9e9915ee8af0dcb7d97cf1f836116

Fixed

1cdac0f14766cd04e0f06de733572d975ecf304c

Introduced

550d7b7898706c7822362c42e7b93120c1d1f29a

Fixed

40ea544c97aa8492596f35a88286ea80326510ec

Fixed

2c3e599797644310e5d4aa39c7193420e59dadff

Fixed

9b5437c72fa3403a75c1aba28e5c532bc191c662

Fixed

e77823e6d980b2ec0b4fe4ea3f2d098ca239e3ce

Database specific

{
    "cpe": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "22.2"
        },
        {
            "fixed": "27.3.4.14"
        },
        {
            "introduced": "28.0"
        },
        {
            "fixed": "28.5.0.3"
        },
        {
            "introduced": "29.0"
        },
        {
            "fixed": "29.0.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

OTP-28.*

OTP-28.0

OTP-28.1

OTP-28.4

OTP-28.5

OTP-28.5.0.1

OTP-28.5.0.2

OTP-29.*

OTP-29.0

OTP-29.0.1

OTP-29.0.2

Other

patch-base-28

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55952.json"