CVE-2026-58227

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-58227", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-06-29T18:54:08.633Z", "datePublished": "2026-07-27T14:39:44.609Z", "dateUpdated": "2026-11-11T14:54:31.941Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "otp", "packageURL": "pkg:software-id/erlang.org/otp", "product": "OTP", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "vendor": "Erlang", "versions": [{"changes": [{"at": "27.3.4.15", "status": "unaffected"}, {"at": "28.5.0.4", "status": "unaffected"}, {"at": "29.0.4", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "23.2", "versionType": "otp"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "ssl", "packageURL": "pkg:otp/ssl?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "product": "OTP", "programFiles": ["src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"changes": [{"at": "11.2.12.11", "status": "unaffected"}, {"at": "11.6.0.4", "status": "unaffected"}, {"at": "11.7.4", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "10.2", "versionType": "otp"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "erlang/otp", "packageURL": "pkg:github/erlang/otp", "product": "OTP", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"changes": [{"at": "7db64720177961e04545681480d691c4be81c54d", "status": "unaffected"}, {"at": "241d43703989fec4b6bf637beaeb366d92dcc4c2", "status": "unaffected"}, {"at": "0307bff2c72b685c6bd952daaac6bd661c247d62", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "addc42df113f8f15fc20e9dff45490b3ce0d3d6b", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "versionEndExcluding": "27.3.4.15", "versionStartIncluding": "23.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "versionEndExcluding": "28.5.0.4", "versionStartIncluding": "28.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "versionEndExcluding": "29.0.4", "versionStartIncluding": "29.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "finder", "value": "Lukas Backstr\u00f6m"}, {"lang": "en", "type": "remediation developer", "value": "Ingela Anderton Andin"}, {"lang": "en", "type": "remediation reviewer", "value": "Dan Gudmundsson"}, {"lang": "en", "type": "remediation reviewer", "value": "Jakub Witczak"}, {"lang": "en", "type": "remediation reviewer", "value": "John H\u00f6gberg"}], "datePublic": "2026-07-27T14:39:44.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The Erlang/OTP <code>ssl</code> application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In <code>ssl_certificate:handle_incomplete_chain/5</code>, the received chain is passed to <code>ssl_certificate:build_certificate_chain/5</code>, which walks issuer relationships via <code>ssl_certificate:do_certificate_chain/7</code> with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.</p>\n<p>An unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS <code>Certificate</code> handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.</p>\n<p>This issue affects OTP from OTP&nbsp;23.2 before OTP&nbsp;27.3.4.15, OTP&nbsp;28.5.0.4, and OTP&nbsp;29.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4.</p>"}, {"base64": false, "type": "text/markdown", "value": "The Erlang/OTP `ssl` application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In `ssl_certificate:handle_incomplete_chain/5`, the received chain is passed to `ssl_certificate:build_certificate_chain/5`, which walks issuer relationships via `ssl_certificate:do_certificate_chain/7` with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS `Certificate` handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP\u00a023.2 before OTP\u00a027.3.4.15, OTP\u00a028.5.0.4, and OTP\u00a029.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4."}], "value": "The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed to ssl_certificate:build_certificate_chain/5, which walks issuer relationships via ssl_certificate:do_certificate_chain/7 with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS Certificate handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP\u00a023.2 before OTP\u00a027.3.4.15, OTP\u00a028.5.0.4, and OTP\u00a029.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4."}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-674", "description": "CWE-674 Uncontrolled Recursion", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T14:54:31.941Z"}, "references": [{"name": "TLS Denial-of-Service using Invalid Cert Chains", "tags": ["vendor-advisory", "related"], "url": "https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw"}, {"name": "EEF CNA record for CVE-2026-58227", "tags": ["related"], "url": "https://cna.erlef.org/cves/CVE-2026-58227.html"}, {"name": "OSV record EEF-CVE-2026-58227", "tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-58227"}, {"name": "Erlang/OTP version ordering", "tags": ["x_version-scheme"], "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"}, {"name": "Introducing commit addc42d in erlang/otp", "tags": ["related"], "url": "https://github.com/erlang/otp/commit/addc42df113f8f15fc20e9dff45490b3ce0d3d6b"}, {"name": "Fix commit 7db6472 in erlang/otp", "tags": ["patch"], "url": "https://github.com/erlang/otp/commit/7db64720177961e04545681480d691c4be81c54d"}, {"name": "Fix commit 241d437 in erlang/otp", "tags": ["patch"], "url": "https://github.com/erlang/otp/commit/241d43703989fec4b6bf637beaeb366d92dcc4c2"}, {"name": "Fix commit 0307bff in erlang/otp", "tags": ["patch"], "url": "https://github.com/erlang/otp/commit/0307bff2c72b685c6bd952daaac6bd661c247d62"}], "source": {"discovery": "INTERNAL"}, "title": "TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-27T17:25:16.012380Z", "id": "CVE-2026-58227", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T17:25:26.884Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-58227", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-27T17:25:16.012380Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T17:25:22.859Z"}}], "cna": {"title": "TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Lukas Backstr\u00f6m"}, {"lang": "en", "type": "remediation developer", "value": "Ingela Anderton Andin"}, {"lang": "en", "type": "remediation reviewer", "value": "Dan Gudmundsson"}, {"lang": "en", "type": "remediation reviewer", "value": "Jakub Witczak"}, {"lang": "en", "type": "remediation reviewer", "value": "John H\u00f6gberg"}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "vendor": "Erlang", "modules": ["ssl_certificate"], "product": "OTP", "versions": [{"status": "affected", "changes": [{"at": "27.3.4.15", "status": "unaffected"}, {"at": "28.5.0.4", "status": "unaffected"}, {"at": "29.0.4", "status": "unaffected"}], "version": "23.2", "lessThan": "*", "versionType": "otp"}], "packageURL": "pkg:software-id/erlang.org/otp", "packageName": "otp", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "defaultStatus": "unaffected", "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "modules": ["ssl_certificate"], "product": "OTP", "versions": [{"status": "affected", "changes": [{"at": "11.2.12.11", "status": "unaffected"}, {"at": "11.6.0.4", "status": "unaffected"}, {"at": "11.7.4", "status": "unaffected"}], "version": "10.2", "lessThan": "*", "versionType": "otp"}], "packageURL": "pkg:otp/ssl?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "packageName": "ssl", "programFiles": ["src/ssl_certificate.erl"], "defaultStatus": "unaffected", "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "modules": ["ssl_certificate"], "product": "OTP", "versions": [{"status": "affected", "changes": [{"at": "7db64720177961e04545681480d691c4be81c54d", "status": "unaffected"}, {"at": "241d43703989fec4b6bf637beaeb366d92dcc4c2", "status": "unaffected"}, {"at": "0307bff2c72b685c6bd952daaac6bd661c247d62", "status": "unaffected"}], "version": "addc42df113f8f15fc20e9dff45490b3ce0d3d6b", "lessThan": "*", "versionType": "git"}], "packageURL": "pkg:github/erlang/otp", "packageName": "erlang/otp", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "collectionURL": "https://github.com", "defaultStatus": "unaffected", "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}]}], "references": [{"url": "https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw", "name": "TLS Denial-of-Service using Invalid Cert Chains", "tags": ["vendor-advisory", "related"]}, {"url": "https://cna.erlef.org/cves/CVE-2026-58227.html", "name": "EEF CNA record for CVE-2026-58227", "tags": ["related"]}, {"url": "https://osv.dev/vulnerability/EEF-CVE-2026-58227", "name": "OSV record EEF-CVE-2026-58227", "tags": ["related"]}, {"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions", "name": "Erlang/OTP version ordering", "tags": ["x_version-scheme"]}, {"url": "https://github.com/erlang/otp/commit/addc42df113f8f15fc20e9dff45490b3ce0d3d6b", "name": "Introducing commit addc42d in erlang/otp", "tags": ["related"]}, {"url": "https://github.com/erlang/otp/commit/7db64720177961e04545681480d691c4be81c54d", "name": "Fix commit 7db6472 in erlang/otp", "tags": ["patch"]}, {"url": "https://github.com/erlang/otp/commit/241d43703989fec4b6bf637beaeb366d92dcc4c2", "name": "Fix commit 241d437 in erlang/otp", "tags": ["patch"]}, {"url": "https://github.com/erlang/otp/commit/0307bff2c72b685c6bd952daaac6bd661c247d62", "name": "Fix commit 0307bff in erlang/otp", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed to ssl_certificate:build_certificate_chain/5, which walks issuer relationships via ssl_certificate:do_certificate_chain/7 with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS Certificate handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP\u00a023.2 before OTP\u00a027.3.4.15, OTP\u00a028.5.0.4, and OTP\u00a029.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4.", "supportingMedia": [{"type": "text/html", "value": "<p>The Erlang/OTP <code>ssl</code> application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In <code>ssl_certificate:handle_incomplete_chain/5</code>, the received chain is passed to <code>ssl_certificate:build_certificate_chain/5</code>, which walks issuer relationships via <code>ssl_certificate:do_certificate_chain/7</code> with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.</p>\n<p>An unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS <code>Certificate</code> handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.</p>\n<p>This issue affects OTP from OTP&nbsp;23.2 before OTP&nbsp;27.3.4.15, OTP&nbsp;28.5.0.4, and OTP&nbsp;29.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4.</p>", "base64": false}, {"type": "text/markdown", "value": "The Erlang/OTP `ssl` application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In `ssl_certificate:handle_incomplete_chain/5`, the received chain is passed to `ssl_certificate:build_certificate_chain/5`, which walks issuer relationships via `ssl_certificate:do_certificate_chain/7` with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS `Certificate` handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP\u00a023.2 before OTP\u00a027.3.4.15, OTP\u00a028.5.0.4, and OTP\u00a029.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-674", "description": "CWE-674 Uncontrolled Recursion"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "27.3.4.15", "versionStartIncluding": "23.2"}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "28.5.0.4", "versionStartIncluding": "28.0"}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "29.0.4", "versionStartIncluding": "29.0"}], "operator": "OR"}], "operator": "AND"}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T14:26:01.115Z"}}}, "cveMetadata": {"cveId": "CVE-2026-58227", "state": "PUBLISHED", "dateUpdated": "2026-11-11T14:26:01.115Z", "dateReserved": "2026-06-29T18:54:08.633Z", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "datePublished": "2026-07-27T14:39:44.609Z", "assignerShortName": "EEF"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "otp", "packageURL": "pkg:software-id/erlang.org/otp", "product": "OTP", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "vendor": "Erlang", "versions": [{"changes": [{"at": "27.3.4.15", "status": "unaffected"}, {"at": "28.5.0.4", "status": "unaffected"}, {"at": "29.0.4", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "23.2", "versionType": "otp"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "ssl", "packageURL": "pkg:otp/ssl?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "product": "OTP", "programFiles": ["src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"changes": [{"at": "11.2.12.11", "status": "unaffected"}, {"at": "11.6.0.4", "status": "unaffected"}, {"at": "11.7.4", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "10.2", "versionType": "otp"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssl_certificate"], "packageName": "erlang/otp", "packageURL": "pkg:github/erlang/otp", "product": "OTP", "programFiles": ["lib/ssl/src/ssl_certificate.erl"], "programRoutines": [{"name": "ssl_certificate:handle_incomplete_chain/5"}, {"name": "ssl_certificate:build_certificate_chain/5"}, {"name": "ssl_certificate:do_certificate_chain/7"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"changes": [{"at": "7db64720177961e04545681480d691c4be81c54d", "status": "unaffected"}, {"at": "241d43703989fec4b6bf637beaeb366d92dcc4c2", "status": "unaffected"}, {"at": "0307bff2c72b685c6bd952daaac6bd661c247d62", "status": "unaffected"}], "lessThan": "*", "status": "affected", "version": "addc42df113f8f15fc20e9dff45490b3ce0d3d6b", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF06E49D-ED0A-4961-839E-15EB0E1EDC3B", "versionEndExcluding": "27.3.4.15", "versionStartIncluding": "23.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5A403B9-F8C0-42F9-9CDD-AE95FBBA58BC", "versionEndExcluding": "28.5.0.4", "versionStartIncluding": "28.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "4325E198-43FA-4DD1-99A5-66705CF21615", "versionEndExcluding": "29.0.4", "versionStartIncluding": "29.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/ssl:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1C5B925-A63B-4C55-AE0D-868DC457E448", "versionEndExcluding": "11.2.12.11", "versionStartIncluding": "10.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/ssl:*:*:*:*:*:*:*:*", "matchCriteriaId": "00A0557D-8DF6-4DD2-AE3A-6F732454D8B8", "versionEndExcluding": "11.6.0.4", "versionStartIncluding": "11.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/ssl:*:*:*:*:*:*:*:*", "matchCriteriaId": "50DDEF08-5FC7-40C5-B9C5-4791B0EC7595", "versionEndExcluding": "11.7.4", "versionStartIncluding": "11.7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed to ssl_certificate:build_certificate_chain/5, which walks issuer relationships via ssl_certificate:do_certificate_chain/7 with no cycle detection and no depth limit. When the peer supplies two mutually cross-signed certificates in unordered form (A issues B, B issues A), the issuer lookup alternates between the two certificates and the pair of functions recurses indefinitely, growing the call stack and chain accumulator without bound.\n\nAn unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS Certificate handshake message to exhaust available memory and crash the BEAM node. Only a TCP connection and a partial handshake are required; no authentication or completed handshake is needed, and both TLS/DTLS servers and clients are affected when processing peer certificate messages.\n\nThis issue affects OTP from OTP\u00a023.2 before OTP\u00a027.3.4.15, OTP\u00a028.5.0.4, and OTP\u00a029.0.4, corresponding to ssl from 10.2 before 11.2.12.11, 11.6.0.4, and 11.7.4."}, {"lang": "es", "value": "La aplicaci\u00f3n ssl de Erlang/OTP no detecta ciclos al reconstruir una cadena de certificados de pares incompleta durante un handshake TLS o DTLS. En ssl_certificate:handle_incomplete_chain/5, la cadena recibida se pasa a ssl_certificate:build_certificate_chain/5, que recorre las relaciones de emisor a trav\u00e9s de ssl_certificate:do_certificate_chain/7 sin detecci\u00f3n de ciclos y sin l\u00edmite de profundidad. Cuando el par suministra dos certificados mutuamente firmados de forma cruzada en formato desordenado (A emite B, B emite A), la b\u00fasqueda del emisor alterna entre los dos certificados y el par de funciones recurre indefinidamente, haciendo crecer la pila de llamadas y el acumulador de la cadena sin l\u00edmite.\n\nUn atacante remoto no autenticado puede enviar una cadena de certificados manipulada en un mensaje de handshake de certificado TLS o DTLS para agotar la memoria disponible y bloquear el nodo BEAM. Solo se requiere una conexi\u00f3n TCP y un handshake parcial; no se necesita autenticaci\u00f3n ni un handshake completado, y tanto los servidores como los clientes TLS/DTLS se ven afectados al procesar mensajes de certificados de pares.\n\nEste problema afecta a OTP desde OTP 23.2 antes de OTP 29.0.4, OTP 28.5.0.4 y OTP 27.3.4.15, lo que corresponde a ssl desde 10.2 antes de 11.7.4, 11.6.0.4 y 11.2.12.11."}], "id": "CVE-2026-58227", "lastModified": "2026-11-11T15:17:23.943", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-58227", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-27T17:25:16.012380Z", "version": "2.0.3"}}]}, "published": "2026-07-27T16:17:56.953", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch", "Third Party Advisory"], "url": "https://cna.erlef.org/cves/CVE-2026-58227.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch"], "url": "https://github.com/erlang/otp/commit/0307bff2c72b685c6bd952daaac6bd661c247d62"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch"], "url": "https://github.com/erlang/otp/commit/241d43703989fec4b6bf637beaeb366d92dcc4c2"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch"], "url": "https://github.com/erlang/otp/commit/7db64720177961e04545681480d691c4be81c54d"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/erlang/otp/commit/addc42df113f8f15fc20e9dff45490b3ce0d3d6b"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Vendor Advisory"], "url": "https://github.com/erlang/otp/security/advisories/GHSA-r5jr-mq46-vmhw"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch", "Third Party Advisory"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-58227"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Release Notes"], "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.2,11.2.12.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.2.12.11,11.2.12.11]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "(11.2.12.11,11.6.0.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.6.0.4,11.6.0.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "(11.6.0.4,11.7.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.7.4,11.7.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[23.2,*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "addc42df113f8f15fc20e9dff45490b3ce0d3d6b"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "7db64720177961e04545681480d691c4be81c54d"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "241d43703989fec4b6bf637beaeb366d92dcc4c2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "0307bff2c72b685c6bd952daaac6bd661c247d62"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "erlang/otp", "vendor": "erlang"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[10.2,11.2.12.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.2.12.11,11.2.12.11]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "(11.2.12.11,11.6.0.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.6.0.4,11.6.0.4]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "(11.6.0.4,11.7.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[11.7.4,11.7.4]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "OTP", "source": "cna", "vendor": "Erlang"}, "product": "otp", "vendor": "erlang"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[23.2,*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "addc42df113f8f15fc20e9dff45490b3ce0d3d6b"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "7db64720177961e04545681480d691c4be81c54d"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "241d43703989fec4b6bf637beaeb366d92dcc4c2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "code_commit", "value": "0307bff2c72b685c6bd952daaac6bd661c247d62"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "OTP", "source": "cna", "vendor": "Erlang"}, "product": "otp", "vendor": "erlang"}], "created": "2026-07-27T17:45:03.472881+00:00", "updated": "2026-08-03T17:30:17.177545+00:00", "vendors": ["erlang", "erlang$PRODUCT$erlang/otp", "erlang$PRODUCT$otp"]}