pyasn1 has a DoS vulnerability in decoder
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| pyasn1 | pyasn1 | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
| Vendor | Product | Versions |
|---|---|---|
| Pyasn1 | Pyasn1 | — |
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-4463-1 | pyasn1 security update |
Debian DSA |
DSA-6114-1 | pyasn1 security update |
Github GHSA |
GHSA-63vm-454h-vhhq | pyasn1 has a DoS vulnerability in decoder |
Ubuntu USN |
USN-7975-1 | pyasn1 vulnerability |
Ubuntu USN |
USN-8134-1 | pyasn1 vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.760% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Debian
Debian debian Linux |
|
| CPEs | cpe:2.3:a:pyasn1:pyasn1:*:*:*:*:*:python:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Debian
Debian debian Linux |
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Pyasn1
Pyasn1 pyasn1 |
|
| Vendors & Products |
Pyasn1
Pyasn1 pyasn1 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2. | |
| Title | pyasn1 has a DoS vulnerability in decoder | |
| Weaknesses | CWE-770 | |
| References |
| |
| Metrics |
cvssV3_1
|
View source · Bugzilla · JSON
OpenCVE enrichment
Updated: Apr 18, 2026, 7:15 PM
Debian DLA
Debian DSA
Github GHSA
Ubuntu USN