PT-2026-25165 · Erlang Solutions+1 · Erlang/Otp+1

Jakub Witczak + 1 · Published 2026-03-13 · Updated 2026-06-03 · CVE-2026-23943

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.4.1 Erlang OTP versions 26.2.5.18 through 27.3.4.9

Description An issue exists in Erlang OTP ssh (ssh transport modules) that allows for Denial of Service via Resource Depletion. The SSH transport layer, by default, advertises legacy zlib compression and inflates attacker-controlled payloads without a size limit before authentication. This enables a reliable memory exhaustion attack. Two compression algorithms are affected: zlib, which activates immediately after key exchange, and [e-mail], which activates post-authentication. Each SSH packet can decompress approximately 255 MB from 256 KB of data, resulting in a 1029:1 amplification ratio. Multiple packets can quickly exhaust available memory, potentially causing Out-Of-Memory (OOM) kills in environments with limited memory. The issue is associated with the ssh transport.erl file and the ssh transport:decompress/2 and ssh transport:handle packet part/4 routines.

Recommendations Update Erlang OTP to a version later than 28.4.1. Update Erlang OTP to a version later than 27.3.4.9.

Fix

DoS

Weakness Enumeration

CWE-409

Related Identifiers

BDU:2026-07216

CVE-2026-23943

GHSA-C836-QPRM-JW9R

OESA-2026-1665

OESA-2026-1666

OESA-2026-1667

OESA-2026-1668

OPENSUSE-SU-2026:10947-1

OPENSUSE-SU-2026:20607-1

SUSE-SU-2026:1714-1

SUSE-SU-2026:2010-1

SUSE-SU-2026:21374-1

Affected Products

Erlang/Otp

Red Os

References · 56

• https://github.com/erlang/otp/commit/93073c3bd338c60cd2bae715ce6a1d4ffc1a8fd3 · Patch
• https://github.com/erlang/otp/commit/0c1c04b191f6ab940e8fcfabce39eb5a8a6440a4 · Patch
• https://github.com/erlang/otp/commit/43a87b949bdff12d629a8c34146711d9da93b1b1 · Patch
• https://github.com/erlang/otp/security/advisories/GHSA-c836-qprm-jw9r · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23943 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20607-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23942 · Security Note
• https://cna.erlef.org/cves/CVE-2026-23943.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07216 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1668 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23943 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23943 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1667 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23941 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1665 · Vendor Advisory