The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes the session ticket handler process. An unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected listener until the ssl application is restarted. TLS 1.2 connections are not affected. This issue affects OTP from OTP 22.2 before OTP 29.0.3, OTP 28.5.0.3 and OTP 27.3.4.14, corresponding to ssl from 9.5 before 11.7.3, 11.6.0.3 and 11.2.12.10.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-965be97ac0 advisory.

    Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS     auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and     CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45);
    backported here to the OTP 26.x line.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory.

    Backport fixes for CVE-2026-48858 (ftp SSRF), CVE-2026-49759 (SCTP DoS), CVE-2026-48860 (dist-over-TLS     auth bypass), CVE-2026-54886 (ssh SFTP DoS), CVE-2026-54891 (TLS handshake data injection), and     CVE-2026-55952 (TLS 1.3 session ticket DoS). These are fixed upstream in OTP 27.x (rawhide/f45);
    backported here to the OTP 26.x line.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Erlang/OTP installed on the remote host is 22.2 prior to 27.3.4.14, 28.0 prior to 28.5.0.3, or 29.0 prior to 29.0.3. It is, therefore, affected by a vulnerability:

  - The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a     TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket     handler. An unauthenticated remote attacker can send a single crafted ClientHello to a TLS 1.3 server with     session tickets enabled and permanently disrupt session ticket handling on that listener. (CVE-2026-55952)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a     TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket     handler. In tls_handshake_1_3:handle_pre_shared_key/3, an OfferedPreSharedKeys record with a mismatched     number of identities and binders is forwarded directly to tls_server_session_ticket:use/4, which crashes     the session ticket handler process. An unauthenticated remote attacker can send a single crafted     ClientHello to a TLS 1.3 server with session tickets enabled (stateful or stateless mode) and permanently     disrupt session ticket handling on that listener. New TLS 1.3 handshakes complete but subsequently crash     when the server attempts to issue a session ticket, effectively making TLS 1.3 unusable on the affected     listener until the ssl application is restarted. TLS 1.2 connections are not affected. This issue affects     OTP from OTP 22.2 before OTP 29.0.3, OTP 28.5.0.3 and OTP 27.3.4.14, corresponding to ssl from 9.5 before     11.7.3, 11.6.0.3 and 11.2.12.10. (CVE-2026-55952)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
327809	Fedora 43 : erlang (2026-965be97ac0)	Nessus	Fedora Local Security Checks	high
327806	Fedora 44 : erlang (2026-dcf80dc1ff)	Nessus	Fedora Local Security Checks	high
325888	Erlang/OTP 22.2 < 27.3.4.14 / 28.0 < 28.5.0.3 / 29.0 < 29.0.3 DoS (CVE-2026-55952)	Nessus	Misc.	high
324940	Linux Distros Unpatched Vulnerability : CVE-2026-55952	Nessus	Misc.	high

Detections

Analytics

CVE-2026-55952

high

Tenable Plugins

high

high

high

high