Loading vulnerability…
Erlang/OTP TLS/DTLS Certificate-Chain Uncontrolled Recursion Denial of Service
CVE-2026-58227 is an uncontrolled-recursion vulnerability in the Erlang/OTP ssl application during reconstruction of incomplete peer certificate chains in TLS or DTLS handshakes. ssl_certificate:handle_incomplete_chain/5 invokes ssl_certificate:build_certificate_chain/5, which follows issuer relationships through ssl_certificate:do_certificate_chain/7 without cycle detection or a depth limit. An unordered chain containing two mutually cross-signed certificates can cause issuer lookup to alternate indefinitely, growing the call stack and chain accumulator until memory is exhausted. Both clients and servers processing peer certificates are affected. Affected releases begin at OTP 23.2, with fixes in OTP 29.0.4, 28.5.0.4, and 27.3.4.15; corresponding fixed ssl versions are 11.7.4, 11.6.0.4, and 11.2.12.11.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
An unauthenticated remote attacker can exhaust available memory and crash the BEAM node, denying service to applications sharing that runtime, not merely the individual TLS or DTLS connection. Exploitation does not require successful authentication or completion of the handshake. No confidentiality or integrity impact is established for this vulnerability.
If you can’t patch tonight, do this now.
Until patched, restrict inbound access to affected Erlang TLS/DTLS services to trusted peers and limit affected clients' outbound connections to trusted endpoints. These controls reduce exposure but do not correct the vulnerable certificate-chain processing. No configuration-only workaround is established.
Patch, then assume compromise.
Upgrade to OTP 29.0.4, 28.5.0.4, or 27.3.4.15, or a later fixed release in the applicable branch. Alternatively, install distribution packages containing backported fixes. Fixed packages include erlang-26.2.5.21-7.fc43 for Fedora 43, erlang-26.2.5.21-7.fc44 for Fedora 44, and 1:27.3.4.1+dfsg-1+deb13u3 or later for Debian trixie. The certificate-chain reconstruction logic must detect issuer cycles and enforce a maximum chain depth.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
12 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.