A vulnerability in the Erlang/OTP SSL application can lead to a denial of service via uncontrolled recursion during certificate chain processing.

This is an uncontrolled recursion (CWE-674) vulnerability occurring during TLS or DTLS handshakes. It is an unauthenticated, remotely exploitable flaw that can be triggered by sending a malformed certificate chain.

Successful exploitation can crash the Erlang/OTP process, resulting in a denial of service for any services relying on the SSL application. With a CVSS score of 8.7, this represents a high risk to service availability for critical infrastructure components running Erlang.

Immediate Action: Update the Erlang/OTP installation to the latest patched version as identified in the official security advisory.

Proactive Monitoring: Monitor system logs for unexpected process crashes or restarts of the SSL/TLS service components.

Compensating Controls: Use a load balancer or reverse proxy to sanitize or terminate TLS connections before they reach the vulnerable Erlang/OTP application.

Public Exploit Available: No.

Operators of services utilizing Erlang/OTP should treat this update as high priority to avoid potential denial of service attacks. Applying the patches provided by the vendor is the most effective way to remediate this recursion flaw and ensure service stability.