Skip to main content

Pyasn1 CVE-2026-23490

HIGH
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-01-16 security-advisories@github.com GHSA-63vm-454h-vhhq
Denial Of Service Python Debian Debian Linux Pyasn1
7.5
CVSS 3.1 · Vendor: github
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Send malformed RELATIVE-OID with excessive continuation octets
  2. Exploit
    Trigger unbounded memory allocation in parser
  3. Execution
    Exhaust system memory
  4. Impact
    Denial of service

Vulnerability Assessment

Weakness
CWE
CWE-770
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V2 - Validation and Business Logic Resource allocation limits
MITRE ATT&CK

1 technique across 1 tactic: Impact

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

No special conditions — remote unauthenticated exploitation against pyasn1 versions prior to 0.6.2 processing untrusted ASN.1 encoded data.
Impact

CVSS 7.5 (HIGH). Attack vector: Network. Complexity: Low. Privileges required: None. User interaction: None.
Exploit ScenarioDerived

An attacker could exploit this flaw, memory exhaustion from malformed RELATIVE-OID with excessive.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

pyasn1 is a generic ASN.1 library for Python. versions up to 0.6.2 is affected by allocation of resources without limits or throttling (CVSS 7.5).

RemediationAI

Fixed in version 0.6.2.. Restrict network access to the affected service where possible.

Affected Packages

pypi pyasn1 fix: 0.6.2

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in pypi

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

This vulnerability (CWE-770: Allocation of Resources Without Limits or Throttling) affects pyasn1 is a generic ASN.1 library for Python.. pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Know when Pyasn1 gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (github) PRIMARY 7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE HIGH
Red Hat 7.5 HIGH

Primary rating from Vendor (github).

CVSS VectorVendor: github

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Patch released
Mar 30, 2026 - 23:01 nvd
Patch available
CVE Published
Jan 16, 2026 - 19:16 nvd
HIGH 7.5

DescriptionCVE.org

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Executive ViewAI

Why It Matters

Organizations using pyasn1 face notable risk from CVE-2026-23490 rated CVSS 7.5. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and consider compensating controls in the interim.

Business Impact: High
Compensating Controls

Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls to limit exposure; (2) Enable enhanced monitoring and alerting; (3) Apply principle of least privilege.

Threat Intelligence Overview

EPSS Score
0.0%
Top 95% exploitable
Threat Intel
1
1 source
Exploit
POC
Public exploit code exists
Data Quality
6 sources
Confidence: High
NVD CVE.org EPSS GHSA Vendor GitHub VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC Yes
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Out-of-Cycle
Exploitation· derived
Poc
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
High

Priority Score

58
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +38
PoC: +20
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Affected Products (CPE)CVE.org

cpe:2.3:a:pyasn1:pyasn1:*:*:*:*:*:python:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

More in Pyasn1

View all
CVE-2026-59884 HIGH
7.5 Jul 14

Denial of service in the pyasn1 Python ASN.1 library (versions prior to 0.6.4) allows a remote attacker to exhaust CPU a
CVE-2026-59885 HIGH
7.5 Jul 14

Denial of service in the pyasn1 Python ASN.1 library (all versions prior to 0.6.4) allows remote attackers to exhaust CP
CVE-2026-59886 HIGH
7.5 Jul 14

Uncontrolled resource consumption in the pyasn1 Python ASN.1 library (versions prior to 0.6.4) lets remote attackers han

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all
CVE-2017-8779 HIGH POC
7.5
CVE-2025-53521 CRITICAL POC
9.3
CVE-2024-28182 MEDIUM
5.3
CVE-2023-2650 MEDIUM
6.5
CVE-2017-5850 HIGH POC
7.5
CVE-2025-26682 HIGH
7.5
CVE-2022-32206 MEDIUM POC
6.5
CVE-2023-24998 HIGH
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
Container suse/manager/4.3/proxy-httpd:4.3.16.2.9.73.11 Container suse/manager/4.3/proxy-tftpd:4.3.16.2.9.63.10 Container suse/manager/5.0/x86_64/proxy-httpd:latest Container suse/manager/5.0/x86_64/proxy-tftpd:latest Container suse/manager/5.0/x86_64/server:latest Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.2.8.15.2 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.2.9.13.2 Container suse/multi-linux-manager/5.1/x86_64/proxy-tftpd:5.1.2.8.13.1 Container suse/sle-micro-rancher/5.2:latest Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-GCE-3P Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-GCE-3P Image proxy-httpd-image Image proxy-tftpd-image Affected
Container suse/multi-linux-manager/5.1/x86_64/server:5.1.2.8.13.2 Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Image server-image Affected
Container suse/sl-micro/6.0/base-os-container:latest Image SL-Micro Affected
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Affected
Image SLES-Azure-3P Image SLES-Azure-Basic Image SLES-Azure-Standard Image SLES-BYOS-Azure Image SLES-BYOS-EC2 Image SLES-CHOST-BYOS-Azure Image SLES-EC2 Image SLES-Hardened-BYOS-Azure Image SLES-Hardened-BYOS-EC2 Image SLES-SAP-Azure Image SLES-SAP-Azure-3P Image SLES-SAP-BYOS-Azure Image SLES-SAP-BYOS-EC2 Image SLES-SAP-BYOS-GCE Image SLES-SAP-GCE Image SLES-SAPCAL-Azure Image SLES-SAPCAL-EC2 Affected

References

Advisories & patches
ADVISORY https://access.redhat.com/errata/RHSA-2026:1903 ADVISORY https://access.redhat.com/errata/RHSA-2026:1904 ADVISORY https://access.redhat.com/errata/RHSA-2026:1905 ADVISORY https://access.redhat.com/errata/RHSA-2026:1906 ADVISORY https://access.redhat.com/errata/RHSA-2026:2221 ADVISORY https://access.redhat.com/errata/RHSA-2026:2299 ADVISORY https://access.redhat.com/errata/RHSA-2026:2300 ADVISORY https://access.redhat.com/errata/RHSA-2026:2302 ADVISORY https://access.redhat.com/errata/RHSA-2026:2303 ADVISORY https://access.redhat.com/errata/RHSA-2026:2309 ADVISORY https://access.redhat.com/errata/RHSA-2026:2453 ADVISORY https://access.redhat.com/errata/RHSA-2026:2460 ADVISORY https://access.redhat.com/errata/RHSA-2026:2483 ADVISORY https://access.redhat.com/errata/RHSA-2026:2486 ADVISORY https://access.redhat.com/errata/RHSA-2026:2712 ADVISORY https://access.redhat.com/errata/RHSA-2026:2758 ADVISORY https://access.redhat.com/errata/RHSA-2026:3354 ADVISORY https://access.redhat.com/errata/RHSA-2026:3359 ADVISORY https://access.redhat.com/errata/RHSA-2026:3958 ADVISORY https://access.redhat.com/errata/RHSA-2026:3959 ADVISORY https://access.redhat.com/errata/RHSA-2026:4138 ADVISORY https://access.redhat.com/errata/RHSA-2026:4139 ADVISORY https://access.redhat.com/errata/RHSA-2026:4140 ADVISORY https://access.redhat.com/errata/RHSA-2026:4141 ADVISORY https://access.redhat.com/errata/RHSA-2026:4142 ADVISORY https://access.redhat.com/errata/RHSA-2026:4143 ADVISORY https://access.redhat.com/errata/RHSA-2026:4144 ADVISORY https://access.redhat.com/errata/RHSA-2026:4145 ADVISORY https://access.redhat.com/errata/RHSA-2026:4146 ADVISORY https://access.redhat.com/errata/RHSA-2026:4147 ADVISORY https://access.redhat.com/errata/RHSA-2026:4148 ADVISORY https://access.redhat.com/errata/RHSA-2026:4943 ADVISORY https://access.redhat.com/errata/RHSA-2026:5606 ADVISORY https://ubuntu.com/security/notices/USN-8134-1 ADVISORY https://vuldb.com/vuln/341645 ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:0252/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:0300/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:0430/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20133/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20158/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20447/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20482/ REF https://access.redhat.com/errata/RHSA-2026:13508 REF https://access.redhat.com/errata/RHSA-2026:13512 REF https://access.redhat.com/errata/RHSA-2026:13545 REF https://access.redhat.com/errata/RHSA-2026:13553 REF https://access.redhat.com/errata/RHSA-2026:14020 REF https://access.redhat.com/errata/RHSA-2026:17446 REF https://access.redhat.com/errata/RHSA-2026:17595 REF https://access.redhat.com/errata/RHSA-2026:17611 REF https://access.redhat.com/errata/RHSA-2026:19712 REF https://access.redhat.com/errata/RHSA-2026:24476 REF https://access.redhat.com/errata/RHSA-2026:24483 REF https://access.redhat.com/errata/RHSA-2026:24866 REF https://access.redhat.com/errata/RHSA-2026:24977 REF https://access.redhat.com/errata/RHSA-2026:28042 REF https://access.redhat.com/errata/RHSA-2026:30088 REF https://access.redhat.com/errata/RHSA-2026:37275 REF https://access.redhat.com/errata/RHSA-2026:39894 REF https://access.redhat.com/errata/RHSA-2026:41928 REF https://access.redhat.com/errata/RHSA-2026:42644 REF https://access.redhat.com/errata/RHSA-2026:54757 REF https://access.redhat.com/security/cve/CVE-2026-23490 REF https://bugzilla.redhat.com/show_bug.cgi?id=2430472 REF https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970 REF https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2 REF https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq REF https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html REF https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy