pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade fence-agents-kubevirtUpgrade fence-virtd-multicastUpgrade fence-agents-brocadeUpgrade fence-agents-ibm-powervsUpgrade fence-agents-commonUpgrade fence-agents-ibmbladeUpgrade fence-agents-eaton-snmpUpgrade fence-agents-rhevmUpgrade fence-agents-awsUpgrade fence-agents-kdumpUpgrade fence-virtUpgrade fence-agents-intelmodularUpgrade resource-agentsUpgrade fence-agents-ipduUpgrade fence-agents-scsiUpgrade fence-agents-openstackUpgrade resource-agents-pafUpgrade fence-agents-gceUpgrade python3-pyasn1-modulesUpgrade fence-agents-vmware-soapUpgrade fence-virtd-libvirtUpgrade resource-agents-aliyunUpgrade fence-agents-apc-snmpUpgrade fence-virtdUpgrade python3-pyasn1Upgrade fence-agents-sbdUpgrade fence-agents-aliyunUpgrade fence-agents-ifmibUpgrade fence-agents-ipmilanUpgrade fence-agents-lparUpgrade fence-agents-emersonUpgrade fence-agents-ilo-sshUpgrade fence-agents-amt-wsUpgrade fence-agents-cisco-ucsUpgrade fence-agents-heuristics-pingUpgrade fence-agents-computeUpgrade fence-agents-ibm-vpcUpgrade fence-agents-redfishUpgrade fence-agents-ilo-mpUpgrade fence-agents-ilo2Upgrade fence-agents-rsbUpgrade fence-agents-zvmUpgrade fence-agents-wtiUpgrade fence-agents-nutanix-ahvUpgrade fence-agents-apcUpgrade ha-cloud-supportUpgrade fence-agents-azure-armUpgrade fence-agents-epsUpgrade fence-agents-vmware-restUpgrade fence-agents-hpbladeUpgrade fence-virtd-tcpUpgrade fence-agents-virshUpgrade fence-agents-allUpgrade fence-agents-rsaUpgrade fence-agents-mpathUpgrade fence-virtd-serialUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-drac5Upgrade fence-agents-cisco-mdsUpgrade resource-agents-gcpUpgrade fence-agents-bladecenterUpgrade fence-virtd-cpg | Feb 11, 2026 | Feb 4, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python3-pyasn1-modulesUpgrade python2-pyasn1Upgrade python3-pyasn1Upgrade python2-pyasn1-modules | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade pyasn1 | Jan 30, 2026 | Jan 30, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Apr 28, 2026 |
| Oracle_linux | — | Upgrade fence-agents-heuristics-pingUpgrade fence-agents-ipmilanUpgrade fence-agents-ifmibUpgrade python2-pyasn1Upgrade fence-agents-intelmodularUpgrade fence-agents-scsiUpgrade fence-virtd-serialUpgrade fence-agents-wtiUpgrade fence-agents-redfishUpgrade fence-agents-vmware-soapUpgrade fence-agents-apcUpgrade fence-agents-gceUpgrade fence-agents-ibmbladeUpgrade fence-agents-ilo-mpUpgrade fence-agents-vmware-restUpgrade ha-cloud-supportUpgrade fence-agents-kubevirtUpgrade fence-agents-allUpgrade fence-agents-hpbladeUpgrade fence-virtUpgrade fence-agents-mpathUpgrade python3-pyasn1Upgrade fence-agents-brocadeUpgrade fence-agents-bladecenterUpgrade fence-agents-lparUpgrade fence-agents-cisco-mdsUpgrade python3-pyasn1-modulesUpgrade fence-agents-ipduUpgrade fence-agents-aliyunUpgrade fence-virtd-libvirtUpgrade fence-agents-cisco-ucsUpgrade resource-agentsUpgrade fence-agents-epsUpgrade fence-virtd-tcpUpgrade fence-agents-nutanix-ahvUpgrade fence-agents-ilo2Upgrade fence-agents-drac5Upgrade fence-agents-azure-armUpgrade fence-agents-rhevmUpgrade fence-agents-rsbUpgrade fence-agents-computeUpgrade fence-agents-commonUpgrade fence-virtd-multicastUpgrade fence-agents-virshUpgrade fence-agents-kdumpUpgrade fence-agents-ilo-sshUpgrade fence-virtd-cpgUpgrade fence-agents-ibm-vpcUpgrade fence-agents-emersonUpgrade fence-virtdUpgrade fence-agents-apc-snmpUpgrade fence-agents-amt-wsUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-openstackUpgrade fence-agents-eaton-snmpUpgrade fence-agents-awsUpgrade python2-pyasn1-modulesUpgrade fence-agents-ibm-powervsUpgrade fence-agents-sbdUpgrade fence-agents-rsa | Feb 9, 2026 | Jan 16, 2026 |
| Redhat Openshift | — | Upgrade python-pyasn1 | Aug 10, 2026 | Jan 16, 2026 |
| Redhat_linux | — | Upgrade python3.12-django-ansible-base+rbacUpgrade automation-eda-controllerUpgrade fence-agents-ilo-mpUpgrade fence-agents-brocadeUpgrade automation-gateway-serverUpgrade python3.12-pulp-containerUpgrade fence-agents-allUpgrade fence-agents-vmware-restUpgrade fence-agents-scsiUpgrade python3-pathspecUpgrade fence-agents-ipduUpgrade fence-agents-hpbladeUpgrade python3-pyasn1Upgrade python3-pytokensUpgrade receptor-debugsourceUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-eda-controller-worker-servicesUpgrade python3.12-dynaconfUpgrade fence-virtd-libvirtUpgrade fence-agents-intelmodularUpgrade fence-virtd-serial-debuginfoUpgrade fence-agents-aliyunUpgrade resource-agents-sap-hana-scaleoutUpgrade python3-blackUpgrade python3.12-galaxy-ngUpgrade python3.12-cryptography-debugsourceUpgrade python3.12-pyOpenSSLUpgrade fence-agents-bladecenterUpgrade python3.12-pytokensUpgrade python3.12-django-ansible-base+feature_flagsUpgrade python3.12-cffiUpgrade fence-agents-vmware-soapUpgrade fence-agents-ifmibUpgrade fence-agents-azure-armUpgrade automation-gateway-proxy-serverUpgrade fence-virtd-serialUpgrade fence-agents-lparUpgrade python3.12-cffi-debuginfoUpgrade receptorUpgrade python3.12-pysequoia-debuginfoUpgrade python3.12-pathspecUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-debuginfoUpgrade automation-platform-uiUpgrade ansible-testUpgrade ansible-coreUpgrade python3.12-django-ansible-baseUpgrade resource-agents-pafUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-pyjwtUpgrade resource-agents-aliyun-debuginfoUpgrade fence-virt-debuginfoUpgrade fence-agents-cisco-mdsUpgrade sap-cluster-connectorUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade python3-pytokens-debuginfoUpgrade fence-agents-wtiUpgrade fence-agents-zvmUpgrade python3.12-django-ansible-base+rest_filtersUpgrade fence-agents-mpathUpgrade ha-cloud-supportUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade automation-gateway-configUpgrade fence-agents-ipmilanUpgrade python3.12-pysequoia-debugsourceUpgrade python3.12-django-ansible-base+redis_clientUpgrade resource-agents-gcpUpgrade fence-agents-heuristics-pingUpgrade python3.12-cffi-debugsourceUpgrade automation-eda-controller-baseUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-apcUpgrade fence-agents-gceUpgrade receptor-debuginfoUpgrade python2-pyasn1Upgrade python-pytokens-debugsourceUpgrade python3.12-markdownUpgrade resource-agents-debugsourceUpgrade fence-agents-kubevirtUpgrade fence-virtd-tcp-debuginfoUpgrade automation-hubUpgrade fence-virtd-debuginfoUpgrade automation-controller-serverUpgrade fence-virtd-cpgUpgrade fence-agents-apc-snmpUpgrade fence-agents-computeUpgrade fence-agents-rhevmUpgrade resource-agents-aliyunUpgrade fence-agents-debugsourceUpgrade automation-controller-venv-towerUpgrade fence-agents-aliyun-debuginfoUpgrade resource-agents-sap-hanaUpgrade python2-pyasn1-modulesUpgrade receptorctlUpgrade fence-agents-awsUpgrade fence-agents-kdumpUpgrade fence-agents-redfishUpgrade fence-agents-amt-wsUpgrade python3.12-pulpcoreUpgrade ha-cloud-support-debuginfoUpgrade python3.12-pytokens-debugsourceUpgrade fence-agents-emersonUpgrade python3-wheel-wheelUpgrade fence-agents-sbdUpgrade automation-gateway-proxy-debugsourceUpgrade fence-agents-openstackUpgrade python3.12-cryptographyUpgrade python3.12-django-ansible-base+api_documentationUpgrade automation-controller-uiUpgrade python3.12-pysequoiaUpgrade automation-gatewayUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-ilo-sshUpgrade python3.12-galaxy-importerUpgrade automation-eda-controller-base-servicesUpgrade python3.12-django-ansible-base+activitystreamUpgrade fence-agents-ilo-moonshotUpgrade fence-agents-common-debuginfoUpgrade python3.12-blackUpgrade python3.12-pyasn1Upgrade fence-agents-virshUpgrade python3.12-pyasn1-modulesUpgrade fence-virtd-tcpUpgrade automation-gateway-proxyUpgrade automation-gateway-proxy-server-debuginfoUpgrade fence-agents-cisco-ucsUpgrade python3-pyasn1-modulesUpgrade fence-virtd-multicastUpgrade resource-agentsUpgrade python3.12-cryptography-debuginfoUpgrade python3.12-jwcryptoUpgrade fence-virtUpgrade resource-agents-sapUpgrade automation-eda-controller-event-stream-servicesUpgrade yamllintUpgrade python3.12-pyjwt+cryptoUpgrade fence-agents-epsUpgrade fence-agents-ibm-powervsUpgrade fence-agents-rsbUpgrade fence-virtd-multicast-debuginfoUpgrade fence-agents-eaton-snmpUpgrade fence-agents-ibmbladeUpgrade fence-agents-rsaUpgrade fence-agents-ibm-vpcUpgrade fence-agents-commonUpgrade python3.12-django-ansible-base+resource_registryUpgrade fence-virtd-cpg-debuginfoUpgrade automation-controllerUpgrade automation-controller-cliUpgrade fence-agents-drac5Upgrade fence-agents-ilo2Upgrade fence-agents-nutanix-ahvUpgrade fence-virtdUpgrade resource-agents-debuginfoUpgrade ansible-lintUpgrade python3.12-pytokens-debuginfo | Feb 5, 2026 | Jan 16, 2026 |
| Rocky_linux | — | Upgrade fence-virtd-cpgUpgrade fence-agents-debugsourceUpgrade fence-virt-debuginfoUpgrade fence-virtdUpgrade fence-agents-kdumpUpgrade fence-virtd-debuginfoUpgrade fence-virtd-tcp-debuginfoUpgrade resource-agentsUpgrade fence-agents-aliyun-debuginfoUpgrade fence-agents-awsUpgrade fence-virtd-tcpUpgrade fence-virtd-multicast-debuginfoUpgrade fence-virtd-cpg-debuginfoUpgrade fence-virtUpgrade fence-agents-computeUpgrade resource-agents-debuginfoUpgrade fence-agents-common-debuginfoUpgrade fence-agents-kubevirt-debuginfoUpgrade fence-agents-commonUpgrade fence-agents-azure-armUpgrade ha-cloud-support-debuginfoUpgrade fence-agents-debuginfoUpgrade resource-agents-debugsourceUpgrade resource-agents-aliyunUpgrade fence-virtd-multicastUpgrade fence-agents-azure-arm-debuginfoUpgrade fence-agents-zvmUpgrade fence-agents-redfishUpgrade fence-virtd-libvirtUpgrade fence-agents-kdump-debuginfoUpgrade fence-agents-aliyunUpgrade ha-cloud-supportUpgrade fence-agents-allUpgrade resource-agents-pafUpgrade fence-agents-gceUpgrade fence-virtd-serialUpgrade resource-agents-gcpUpgrade fence-virtd-serial-debuginfoUpgrade resource-agents-aliyun-debuginfoUpgrade fence-virtd-libvirt-debuginfoUpgrade fence-agents-openstackUpgrade fence-agents-kubevirt | Feb 9, 2026 | Feb 6, 2026 |
| Suse | — | Upgrade python3-pyasn1Upgrade python313-pyasn1Upgrade python311-pyasn1Upgrade python-pyasn1 | Jan 23, 2026 | Jan 23, 2026 |
| Ubuntu | — | Upgrade pypy-pyasn1 (Ubuntu Pro)Upgrade python-pyasn1 (Ubuntu Pro)Upgrade python3-pyasn1Upgrade python3-pyasn1 (Ubuntu Pro) | Jan 23, 2026 | Jan 16, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 16, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub