Поиск уязвимостей
Количество 12
Количество 12
GHSA-m4p7-r5rc-7g4j
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-59884
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
CVE-2026-59884
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
CVE-2026-59884
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4.
CVE-2026-59884
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-59884
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER ...
ROS-20260901-80-0032
Уязвимость python-pyasn1
ROS-20260901-73-0023
Уязвимость python-pyasn1
BDU:2026-15491
Уязвимость библиотеки pyasn1 языка программирования Python, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2026:21392-1
Security update for python-pyasn1
SUSE-SU-2026:3238-1
Security update for python-pyasn1
ALT-PU-2026-10784
ALT-PU-2026-10784: package `python3-module-pyasn1` update to version 0.6.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-m4p7-r5rc-7g4j pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59884 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59884 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4. | CVSS3: 5.9 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59884 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU cost growing quadratically and to trigger unhandled ValueError exceptions in Python 3.11+ error formatting paths. Any application decoding untrusted BER, CER, or DER input is affected. This issue is fixed in version 0.6.4. | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
| CVE-2026-59884 pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER ... | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | ROS-20260901-80-0032 Уязвимость python-pyasn1 | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
| ROS-20260901-73-0023 Уязвимость python-pyasn1 | CVSS3: 7.5 | 1% Низкий | 2 месяца назад |
 | BDU:2026-15491 Уязвимость библиотеки pyasn1 языка программирования Python, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:21392-1 Security update for python-pyasn1 | 4 месяца назад | ||
| SUSE-SU-2026:3238-1 Security update for python-pyasn1 | 4 месяца назад | ||
| ALT-PU-2026-10784 ALT-PU-2026-10784: package `python3-module-pyasn1` update to version 0.6.4-alt1 | CVSS3: 7.5 | 4 месяца назад |
Уязвимостей на страницу