CVE-2026-55952: erlang/otp from 22.2 (inclusive), before 27.3.4.14 (exclusive), from 28.0 (inclusive), before 28.5.0.3 (exclusive)…

Affected technology

erlang/otp · from 22.2 (inclusive), before 27.3.4.14 (exclusive)
erlang

erlang/otp · from 28.0 (inclusive), before 28.5.0.3 (exclusive)
erlang

erlang/otp · from 29.0 (inclusive), before 29.0.3 (exclusive)
erlang

erlang/ssl · from 9.5 (inclusive), before 11.2.12.10 (exclusive)
erlang

erlang/ssl · from 11.3 (inclusive), before 11.6.0.3 (exclusive)
erlang

erlang/ssl · from 11.7 (inclusive), before 11.7.3 (exclusive)
erlang

OTP · 9.5 to before *; status changes: 11.7.3 — unaffected, 11.6.0.3 — unaffected, 11.2.12.10 — unaffected
Erlang

OTP · 22.2 to before *; status changes: 29.0.3 — unaffected, 28.5.0.3 — unaffected, 27.3.4.14 — unaffected, 339a279f02ce38a7b23010e56000613e19abb21f to before *; status changes: e77823e6d980b2ec0b4fe4ea3f2d098ca239e3ce — unaffected, 2c3e599797644310e5d4aa39c7193420e59dadff — unaffected, 9b5437c72fa3403a75c1aba28e5c532bc191c662 — unaffected
Erlang

Component: tls_handshake_1_3
Function: tls_handshake_1_3:handle_pre_shared_key/3
File: src/tls_handshake_1_3.erl, lib/ssl/src/tls_handshake_1_3.erl

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. Source advisory’s CVSS 4.0 assessment (base score 8.2/10) rates confidentiality and integrity impact as none; availability impact as high.