Поиск уязвимостей
Количество 24
Количество 24
CVE-2026-59886
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
CVE-2026-59886
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
CVE-2026-59886
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
CVE-2026-59886
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-59886
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ ...
ROS-20260902-80-0020
Уязвимость python-pyasn1
ROS-20260902-73-0019
Уязвимость python-pyasn1
RLSA-2026:59243
Important: python-pyasn1 security update
RLSA-2026:59242
Important: python-pyasn1 security update
RLSA-2026:59241
Important: python-pyasn1 security update
RLSA-2026:53365
Important: fence-agents security update
RLSA-2026:53363
Important: fence-agents security update
GHSA-hm4w-wwcw-mr6r
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
ELSA-2026-59243
ELSA-2026-59243: python-pyasn1 security update (IMPORTANT)
ELSA-2026-59242
ELSA-2026-59242: python-pyasn1 security update (IMPORTANT)
ELSA-2026-59241
ELSA-2026-59241: python-pyasn1 security update (IMPORTANT)
ELSA-2026-59240
ELSA-2026-59240: python-pyasn1 security update (IMPORTANT)
ELSA-2026-53365
ELSA-2026-53365: fence-agents security update (IMPORTANT)
ELSA-2026-53364
ELSA-2026-53364: resource-agents security update (IMPORTANT)
ELSA-2026-53363
ELSA-2026-53363: fence-agents security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59886 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-59886 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-59886 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4. | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-59886 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ ... | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
 | ROS-20260902-80-0020 Уязвимость python-pyasn1 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| ROS-20260902-73-0019 Уязвимость python-pyasn1 | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
 | RLSA-2026:59243 Important: python-pyasn1 security update | 0% Низкий | 3 месяца назад | |
| RLSA-2026:59242 Important: python-pyasn1 security update | 0% Низкий | 3 месяца назад | |
| RLSA-2026:59241 Important: python-pyasn1 security update | 0% Низкий | 3 месяца назад | |
| RLSA-2026:53365 Important: fence-agents security update | 0% Низкий | 3 месяца назад | |
| RLSA-2026:53363 Important: fence-agents security update | 0% Низкий | 3 месяца назад | |
| GHSA-hm4w-wwcw-mr6r pyasn1: Uncontrolled resource consumption when converting decoded REAL values | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| ELSA-2026-59243 ELSA-2026-59243: python-pyasn1 security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-59242 ELSA-2026-59242: python-pyasn1 security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-59241 ELSA-2026-59241: python-pyasn1 security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-59240 ELSA-2026-59240: python-pyasn1 security update (IMPORTANT) | 0% Низкий | 11 дней назад | |
| ELSA-2026-53365 ELSA-2026-53365: fence-agents security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-53364 ELSA-2026-53364: resource-agents security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
| ELSA-2026-53363 ELSA-2026-53363: fence-agents security update (IMPORTANT) | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу