Към съдържанието
Търсене

CVE-2026-23490: pyasn1, отказ на услуга

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: има публичен пример за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Засегнати продукти

  • pyasn1 pyasn1: < 0.6.2
  • Red Hat: още 49 продукта, добавени от Red Hat

    Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1 for RHEL 8, Red Hat AI Inference Server 3.3, Red Hat Ansible Automation Platform 2.5, Red Hat Ansible Automation Platform 2.6, Red Hat Ceph Storage 8, Red Hat Enterprise Linux AI 3.3, Red Hat Migration Toolkit 1.8, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.3, Red Hat OpenStack 1.5, Red Hat OpenStack Services on OpenShift 18.0, Red Hat Trusted Artifact Signer 1.3, Red Hat Trusted Artifact Signer 1.4, Red Hat Update Infrastructure 5, Lightspeed Core, Migration Toolkit for Containers, Migration Toolkit for Virtualization, OpenShift Lightspeed, OpenShift Service Mesh 3, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 6, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat Quay 3, Red Hat Satellite 6

Вид слабост

История

  • 16 януари 2026 Публикувано

Други уязвимости в pyasn1 pyasn1

Първоизточници

CVE-2026-23490: pyasn1, отказ на услуга | freedomonline.bg