pyasn1 vulnerabilities
It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume excessive CPU resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-59884) It was discovered that pyasn1 processed OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume excessive CPU resources, resulting in a denial
Read at Ubuntu Security Notices
- Vendor
- Canonical
- Product
- Ubuntu
- EPSS
- 0.004 (p37)
- Fix
- available
- Exposure class
- Operating system
Why it ranks 45 (High)
- Product class: operating system
- Widely deployed vendor product (Canonical)
- Covered by 2 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-59884 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-59885 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-59886 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-119194 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-119195 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.