pyasn1 has a DoS vulnerability in decoder
Priority HIGH 72CWE-770Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 55 fixed, 10 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-770.
Summary
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0076 55th percentileScored 2026-11-07
Fix Partial pyasn1 (pyasn1): 0.6.2pyasn1 (PyPI): 0.6.2Red Hat: 54 advisoriesRed Hat: 55 fixed, 10 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| pyasn1 | pyasn1 | before 0.6.2 | 0.6.2 | Patch available | CNA |
| — | pyasn1 (PyPI) | 0.6.1 to before 0.6.2 | 0.6.2 | Patch available | GHSA-63vm-454h-vhhq |
- pyasn1 Vendorpyasn1 Affected before 0.6.2 Fixed in 0.6.2 Patch available CNA
- pyasn1 (PyPI) Vendor— Affected 0.6.1 to before 0.6.2 Fixed in 0.6.2 Patch available GHSA-63vm-454h-vhhq
Remediation
- Fix · CNA pyasn1 (pyasn1) Fixed in 0.6.2
- Fix · GHSA-63vm-454h-vhhq pyasn1 (PyPI) Fixed in 0.6.2 Advisory →
Red Hat 54 advisories
- RHSA-2026:73987 Released 2026-09-30 · Red Hat rating CriticalRHOAI 3.3.7 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
- RHSA-2026:54757 Released 2026-08-13 · Red Hat rating ImportantRed Hat OpenStack Platform 16.2 security advisory
- Red Hat OpenStack Platform 16.2 collectd-sensubility-0.2.1-1.1.el8ost, erlang-23.3.4.18-2.el8ost, erlang-asn1-23.3.4.18-2.el8ost +41
- RHSA-2026:42644 Released 2026-07-21 · Red Hat rating ImportantRHOAI 2.25.9 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
Show 51 more Red Hat advisories
- RHSA-2026:41928 Released 2026-07-20 · Red Hat rating ImportantRed Hat Migration Toolkit for Containers
- Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
- RHSA-2026:39894 Released 2026-07-15 · Red Hat rating ImportantRelease of containers for RHOSO 18.0.21
- Red Hat OpenStack Services on OpenShift 18.0 registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9, registry.redhat.io/rhoso-operators/prometheus-podman-exporter-rhel9, registry.redhat.io/rhoso-operators/sg-core-rhel9
- RHSA-2026:37275 Released 2026-07-09 · Red Hat rating CriticalRHOAI 3.3.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9, registry.redhat.io/rhoai/odh-feast-operator-rhel9 +45
- RHSA-2026:30088 Released 2026-06-25 · Red Hat rating CriticalRed Hat AI Inference Server 3.3.5 (ROCm)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:28042 Released 2026-06-22 · Red Hat rating ImportantRed Hat OpenStack Platform 17.1 (python-pyasn1) security update
- Red Hat OpenStack Platform 17.1 python-pyasn1-0.4.6-5.el8ost, python3-pyasn1-0.4.6-5.el8ost, python3-pyasn1-modules-0.4.6-5.el8ost
- RHSA-2026:24977 Released 2026-06-10 · Red Hat rating ImportantRHOAI 2.25.7 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +34
- RHSA-2026:24866 Released 2026-06-09 · Red Hat rating CriticalRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9 +7
- RHSA-2026:24483 Released 2026-06-08 · Red Hat rating ImportantRHTAS 1.4 - GA Release of Model Transparency 1.0.1
- Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/model-transparency-rhel9
- RHSA-2026:24476 Released 2026-06-08 · Red Hat rating ImportantRHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/segment-reporting-rhel9
- RHSA-2026:19712 Released 2026-05-20 · Red Hat rating CriticalRHOAI 3.3.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +33
- RHSA-2026:17595 Released 2026-05-20 · Red Hat rating ImportantOpenShift Container Platform 4.17.54 packages and security update
- Ironic content for Red Hat OpenShift Container Platform 4.17 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
- Red Hat OpenShift Container Platform 4.17 podman-5:5.2.2-18.rhaos4.17.el8, podman-5:5.2.2-18.rhaos4.17.el9, podman-catatonit-5:5.2.2-18.rhaos4.17.el8 +9
- RHSA-2026:17446 Released 2026-05-20 · Red Hat rating ImportantOpenShift Container Platform 4.18.42 packages and security update
- Ironic content for Red Hat OpenShift Container Platform 4.18 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
- Red Hat OpenShift Container Platform 4.18 podman-5:5.2.2-11.rhaos4.18.el8, podman-catatonit-5:5.2.2-11.rhaos4.18.el8, podman-docker-5:5.2.2-11.rhaos4.18.el8 +4
- RHSA-2026:17611 Released 2026-05-14 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.3
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:14020 Released 2026-05-06 · Red Hat rating ImportantRelease of components for Service Telemetry Framework 1.5.7
- Red Hat OpenStack 1.5 registry.redhat.io/stf/prometheus-webhook-snmp-rhel9, registry.redhat.io/stf/service-telemetry-rhel9-operator, registry.redhat.io/stf/sg-core-rhel9 +1
- RHSA-2026:13553 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Container Release Update
- Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel8, registry.redhat.io/ansible-automation-platform-25/gateway-rhel8, registry.redhat.io/ansible-automation-platform-25/hub-rhel8 +2
- RHSA-2026:13545 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9, registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9 +11
- RHSA-2026:13512 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-venv-tower-4.6.28-3.el8ap, automation-gateway-proxy-2.5.10-5.el8ap, automation-gateway-proxy-server-2.5.10-5.el8ap +19
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-venv-tower-4.6.28-3.el9ap, automation-gateway-proxy-2.6.14-2.el9, automation-gateway-proxy-server-2.6.14-2.el9 +19
- RHSA-2026:13508 Released 2026-05-04 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.4-3.el10ap, receptorctl-1.6.4-3.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.11-2.el9ap, automation-controller-cli-4.7.11-2.el9ap, automation-controller-server-4.7.11-2.el9ap +25
- RHSA-2026:5606 Released 2026-03-24 · Red Hat rating ImportantRed Hat Ceph Storage
- Red Hat Ceph Storage 8 registry.redhat.io/rhceph/rhceph-8-rhel9
- RHSA-2026:4943 Released 2026-03-18 · Red Hat rating ImportantRed Hat Update Infrastructure 5.1 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
- RHSA-2026:4141 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) python-pyasn1-0.4.8-6.el9_6.1, python3-pyasn1-0.4.8-6.el9_6.1, python3-pyasn1-modules-0.4.8-6.el9_6.1
- RHSA-2026:4143 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) python-pyasn1-0.4.8-6.el9_4.1, python3-pyasn1-0.4.8-6.el9_4.1, python3-pyasn1-modules-0.4.8-6.el9_4.1
- RHSA-2026:4147 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) python-pyasn1-0.3.7-6.el8_4.1, python3-pyasn1-0.3.7-6.el8_4.1, python3-pyasn1-modules-0.3.7-6.el8_4.1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) python-pyasn1-0.3.7-6.el8_4.1, python3-pyasn1-0.3.7-6.el8_4.1, python3-pyasn1-modules-0.3.7-6.el8_4.1
- RHSA-2026:4139 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) python-pyasn1-0.3.7-6.el8_8.1, python3-pyasn1-0.3.7-6.el8_8.1, python3-pyasn1-modules-0.3.7-6.el8_8.1
- Red Hat Enterprise Linux AppStream TUS (v.8.8) python-pyasn1-0.3.7-6.el8_8.1, python3-pyasn1-0.3.7-6.el8_8.1, python3-pyasn1-modules-0.3.7-6.el8_8.1
- RHSA-2026:4146 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream (v. 8) python-pyasn1-0.3.7-6.el8_10.1, python3-pyasn1-0.3.7-6.el8_10.1, python3-pyasn1-modules-0.3.7-6.el8_10.1
- RHSA-2026:4140 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) python-pyasn1-0.4.8-6.el9_0.1, python3-pyasn1-0.4.8-6.el9_0.1, python3-pyasn1-modules-0.4.8-6.el9_0.1
- RHSA-2026:4148 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) python-pyasn1-0.1.9-7.el7_9.2, python2-pyasn1-0.1.9-7.el7_9.2, python2-pyasn1-modules-0.1.9-7.el7_9.2
- RHSA-2026:4144 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) python-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-modules-0.3.7-6.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) python-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-modules-0.3.7-6.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) python-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-0.3.7-6.el8_6.1, python3-pyasn1-modules-0.3.7-6.el8_6.1
- RHSA-2026:4138 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) python-pyasn1-0.6.2-1.el10_0.1, python3-pyasn1-0.6.2-1.el10_0.1, python3-pyasn1-modules-0.6.2-1.el10_0.1
- RHSA-2026:4142 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) python-pyasn1-0.4.8-6.el9_2.1, python3-pyasn1-0.4.8-6.el9_2.1, python3-pyasn1-modules-0.4.8-6.el9_2.1
- RHSA-2026:4145 Released 2026-03-10 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) python-pyasn1-0.3.7-6.el8_2.1, python3-pyasn1-0.3.7-6.el8_2.1, python3-pyasn1-modules-0.3.7-6.el8_2.1
- RHSA-2026:3959 Released 2026-03-06 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-4.6.26-1.el8ap, automation-controller-cli-4.6.26-1.el8ap, automation-controller-server-4.6.26-1.el8ap +10
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-4.6.26-1.el9ap, automation-controller-cli-4.6.26-1.el9ap, automation-controller-server-4.6.26-1.el9ap +10
- RHSA-2026:3958 Released 2026-03-06 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.3-4.el10ap, receptorctl-1.6.3-4.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.9-1.el9ap, automation-controller-cli-4.7.9-1.el9ap, automation-controller-server-4.7.9-1.el9ap +8
- RHSA-2026:3359 Released 2026-02-25 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream (v. 9) python-pyasn1-0.4.8-7.el9_7, python3-pyasn1-0.4.8-7.el9_7, python3-pyasn1-modules-0.4.8-7.el9_7
- RHSA-2026:3354 Released 2026-02-25 · Red Hat rating Importantpython-pyasn1 security update
- Red Hat Enterprise Linux AppStream (v. 10) python-pyasn1-0.6.2-1.el10_1, python3-pyasn1-0.6.2-1.el10_1, python3-pyasn1-modules-0.6.2-1.el10_1
- RHSA-2026:2758 Released 2026-02-16 · Red Hat rating Importantresource-agents security update
- Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) resource-agents-4.1.1-61.el7_9.23, resource-agents-aliyun-4.1.1-61.el7_9.23, resource-agents-gcp-4.1.1-61.el7_9.23
- Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) resource-agents-4.1.1-61.el7_9.23, resource-agents-aliyun-4.1.1-61.el7_9.23, resource-agents-gcp-4.1.1-61.el7_9.23
- Red Hat Enterprise Linux Server for SAP ELS (v. 7) resource-agents-4.1.1-61.el7_9.23, resource-agents-sap-4.1.1-61.el7_9.23, sap-cluster-connector-3.0.1-37.el7_9.23
- Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7) resource-agents-4.1.1-61.el7_9.23, resource-agents-sap-hana-4.1.1-61.el7_9.23, resource-agents-sap-hana-scaleout-0.164.0-6.el7_9.23
- RHSA-2026:2712 Released 2026-02-16 · Red Hat rating Importantresource-agents security update
- Red Hat Enterprise Linux High Availability AUS (v.8.4) resource-agents-4.1.1-90.el8_4.23, resource-agents-aliyun-4.1.1-90.el8_4.23, resource-agents-gcp-4.1.1-90.el8_4.23
- Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) resource-agents-4.1.1-90.el8_4.23, resource-agents-aliyun-4.1.1-90.el8_4.23, resource-agents-gcp-4.1.1-90.el8_4.23
- RHSA-2026:2486 Released 2026-02-10 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream AUS (v.8.6) fence-agents-4.2.1-89.el8_6.21, fence-agents-all-4.2.1-89.el8_6.21, fence-agents-amt-ws-4.2.1-89.el8_6.21 +40
- Red Hat Enterprise Linux AppStream E4S (v.8.6) fence-agents-4.2.1-89.el8_6.21, fence-agents-all-4.2.1-89.el8_6.21, fence-agents-amt-ws-4.2.1-89.el8_6.21 +41
- Red Hat Enterprise Linux AppStream TUS (v.8.6) fence-agents-4.2.1-89.el8_6.21, fence-agents-all-4.2.1-89.el8_6.21, fence-agents-amt-ws-4.2.1-89.el8_6.21 +40
- Red Hat Enterprise Linux High Availability E4S (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.21, fence-agents-aws-4.2.1-89.el8_6.21, fence-agents-azure-arm-4.2.1-89.el8_6.21 +1
- Red Hat Enterprise Linux High Availability TUS (v.8.6) fence-agents-aliyun-4.2.1-89.el8_6.21, fence-agents-aws-4.2.1-89.el8_6.21, fence-agents-azure-arm-4.2.1-89.el8_6.21 +1
- RHSA-2026:2483 Released 2026-02-10 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) fence-agents-4.2.1-65.el8_4.27, fence-agents-all-4.2.1-65.el8_4.27, fence-agents-amt-ws-4.2.1-65.el8_4.27 +39
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) fence-agents-4.2.1-65.el8_4.27, fence-agents-all-4.2.1-65.el8_4.27, fence-agents-amt-ws-4.2.1-65.el8_4.27 +36
- Red Hat Enterprise Linux High Availability AUS (v.8.4) fence-agents-aliyun-4.2.1-65.el8_4.27, fence-agents-aws-4.2.1-65.el8_4.27, fence-agents-azure-arm-4.2.1-65.el8_4.27 +1
- Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) fence-agents-aliyun-4.2.1-65.el8_4.27, fence-agents-aws-4.2.1-65.el8_4.27, fence-agents-azure-arm-4.2.1-65.el8_4.27 +1
- RHSA-2026:2460 Released 2026-02-10 · Red Hat rating Importantresource-agents security update
- Red Hat Enterprise Linux High Availability E4S (v.8.8) resource-agents-4.9.0-40.el8_8.16, resource-agents-aliyun-4.9.0-40.el8_8.16, resource-agents-gcp-4.9.0-40.el8_8.16 +1
- Red Hat Enterprise Linux High Availability TUS (v.8.8) resource-agents-4.9.0-40.el8_8.16, resource-agents-aliyun-4.9.0-40.el8_8.16, resource-agents-gcp-4.9.0-40.el8_8.16 +1
- RHSA-2026:2453 Released 2026-02-10 · Red Hat rating Importantresource-agents security update
- Red Hat Enterprise Linux High Availability E4S (v.8.6) resource-agents-4.9.0-16.el8_6.20, resource-agents-aliyun-4.9.0-16.el8_6.20, resource-agents-gcp-4.9.0-16.el8_6.20 +1
- Red Hat Enterprise Linux High Availability TUS (v.8.6) resource-agents-4.9.0-16.el8_6.20, resource-agents-aliyun-4.9.0-16.el8_6.20, resource-agents-gcp-4.9.0-16.el8_6.20 +1
- RHSA-2026:2299 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) fence-agents-4.10.0-86.el9_6.15, fence-agents-aliyun-4.10.0-86.el9_6.15, fence-agents-all-4.10.0-86.el9_6.15 +47
- RHSA-2026:2302 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) fence-agents-4.10.0-62.el9_4.22, fence-agents-common-4.10.0-62.el9_4.22, fence-agents-compute-4.10.0-62.el9_4.22 +11
- Red Hat Enterprise Linux High Availability EUS (v.9.4) fence-agents-aliyun-4.10.0-62.el9_4.22, fence-agents-all-4.10.0-62.el9_4.22, fence-agents-amt-ws-4.10.0-62.el9_4.22 +40
- Red Hat Enterprise Linux Resilient Storage EUS (v.9.4) fence-agents-aliyun-4.10.0-62.el9_4.22, fence-agents-all-4.10.0-62.el9_4.22, fence-agents-amt-ws-4.10.0-62.el9_4.22 +39
- RHSA-2026:2309 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) fence-agents-4.16.0-5.el10_0.8, fence-agents-aliyun-4.16.0-5.el10_0.8, fence-agents-all-4.16.0-5.el10_0.8 +47
- RHSA-2026:2300 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) fence-agents-4.10.0-43.el9_2.19, fence-agents-common-4.10.0-43.el9_2.19, fence-agents-compute-4.10.0-43.el9_2.19 +11
- Red Hat Enterprise Linux High Availability E4S (v.9.2) fence-agents-aliyun-4.10.0-43.el9_2.19, fence-agents-all-4.10.0-43.el9_2.19, fence-agents-amt-ws-4.10.0-43.el9_2.19 +40
- Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) fence-agents-aliyun-4.10.0-43.el9_2.19, fence-agents-all-4.10.0-43.el9_2.19, fence-agents-amt-ws-4.10.0-43.el9_2.19 +39
- RHSA-2026:2303 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) fence-agents-4.10.0-20.el9_0.28, fence-agents-common-4.10.0-20.el9_0.28, fence-agents-compute-4.10.0-20.el9_0.28 +12
- Red Hat Enterprise Linux High Availability E4S (v.9.0) fence-agents-aliyun-4.10.0-20.el9_0.28, fence-agents-all-4.10.0-20.el9_0.28, fence-agents-amt-ws-4.10.0-20.el9_0.28 +40
- Red Hat Enterprise Linux ResilientStorage E4S (v.9.0) fence-agents-aliyun-4.10.0-20.el9_0.28, fence-agents-all-4.10.0-20.el9_0.28, fence-agents-amt-ws-4.10.0-20.el9_0.28 +39
- RHSA-2026:2221 Released 2026-02-09 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream E4S (v.8.8) fence-agents-4.2.1-112.el8_8.16, fence-agents-all-4.2.1-112.el8_8.16, fence-agents-amt-ws-4.2.1-112.el8_8.16 +40
- Red Hat Enterprise Linux AppStream TUS (v.8.8) fence-agents-4.2.1-112.el8_8.16, fence-agents-all-4.2.1-112.el8_8.16, fence-agents-amt-ws-4.2.1-112.el8_8.16 +39
- Red Hat Enterprise Linux High Availability E4S (v.8.8) fence-agents-aliyun-4.2.1-112.el8_8.16, fence-agents-aws-4.2.1-112.el8_8.16, fence-agents-azure-arm-4.2.1-112.el8_8.16 +2
- Red Hat Enterprise Linux High Availability TUS (v.8.8) fence-agents-aliyun-4.2.1-112.el8_8.16, fence-agents-aws-4.2.1-112.el8_8.16, fence-agents-azure-arm-4.2.1-112.el8_8.16 +2
- RHSA-2026:1903 Released 2026-02-04 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream (v. 9) fence-agents-4.10.0-98.el9_7.5, fence-agents-aliyun-4.10.0-98.el9_7.5, fence-agents-all-4.10.0-98.el9_7.5 +47
- RHSA-2026:1906 Released 2026-02-04 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream (v. 8) fence-agents-4.2.1-129.el8_10.21, fence-agents-all-4.2.1-129.el8_10.21, fence-agents-amt-ws-4.2.1-129.el8_10.21 +41
- Red Hat Enterprise Linux HighAvailability (v. 8) fence-agents-aliyun-4.2.1-129.el8_10.21, fence-agents-aws-4.2.1-129.el8_10.21, fence-agents-azure-arm-4.2.1-129.el8_10.21 +2
- Red Hat Enterprise Linux ResilientStorage (v. 8) fence-agents-aliyun-4.2.1-129.el8_10.21, fence-agents-aws-4.2.1-129.el8_10.21, fence-agents-azure-arm-4.2.1-129.el8_10.21 +2
- RHSA-2026:1905 Released 2026-02-04 · Red Hat rating Importantfence-agents security update
- Red Hat Enterprise Linux AppStream (v. 10) fence-agents-4.16.0-13.el10_1.2, fence-agents-aliyun-4.16.0-13.el10_1.2, fence-agents-all-4.16.0-13.el10_1.2 +47
- RHSA-2026:1904 Released 2026-02-04 · Red Hat rating Importantresource-agents security update
- Red Hat Enterprise Linux HighAvailability (v. 8) resource-agents-4.9.0-54.el8_10.28, resource-agents-aliyun-4.9.0-54.el8_10.28, resource-agents-gcp-4.9.0-54.el8_10.28 +1
- Red Hat Enterprise Linux ResilientStorage (v. 8) resource-agents-4.9.0-54.el8_10.28, resource-agents-aliyun-4.9.0-54.el8_10.28, resource-agents-gcp-4.9.0-54.el8_10.28 +1
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Lightspeed Core | Affected | No fix yet |
| Migration Toolkit for Containers | Affected | No fix planned: Will not fix |
| Migration Toolkit for Virtualization | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| Red Hat AI Inference Server | Affected | No fix planned: Will not fix |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet |
| Red Hat Quay 3 | Affected | No fix planned: Will not fix |
| Red Hat Satellite 6 | Affected | No fix yet |
| Ironic content for Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:17595 |
| Ironic content for Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:17446 |
| Red Hat AI Inference Server 3.3 | Fixed | RHSA-2026:30088 |
| Red Hat Ansible Automation Platform 2.5 | Fixed | RHSA-2026:13553 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Fixed | RHSA-2026:13512, RHSA-2026:3959 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Fixed | RHSA-2026:13512, RHSA-2026:3959 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:13545, RHSA-2026:24866 |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Fixed | RHSA-2026:13508, RHSA-2026:3958 |
| Red Hat Ceph Storage 8 | Fixed | RHSA-2026:5606 |
| Red Hat Enterprise Linux AI 3.3 | Fixed | RHSA-2026:17611 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:1905, RHSA-2026:3354 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2026:1906, RHSA-2026:4146 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:1903, RHSA-2026:3359 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2026:4145 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2026:2483, RHSA-2026:4147 |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Fixed | RHSA-2026:2486, RHSA-2026:4144 |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Fixed | RHSA-2026:2486, RHSA-2026:4144 |
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Fixed | RHSA-2026:2221, RHSA-2026:4139 |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Fixed | RHSA-2026:2303, RHSA-2026:4140 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:2300, RHSA-2026:4142 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:2309, RHSA-2026:4138 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2026:2302, RHSA-2026:4143 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:2299, RHSA-2026:4141 |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:2483, RHSA-2026:4147 |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Fixed | RHSA-2026:2486, RHSA-2026:4144 |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Fixed | RHSA-2026:2221, RHSA-2026:4139 |
| Red Hat Enterprise Linux High Availability AUS (v.8.4) | Fixed | RHSA-2026:2483, RHSA-2026:2712 |
| Red Hat Enterprise Linux High Availability E4S (v.8.6) | Fixed | RHSA-2026:2453, RHSA-2026:2486 |
| Red Hat Enterprise Linux High Availability E4S (v.8.8) | Fixed | RHSA-2026:2221, RHSA-2026:2460 |
| Red Hat Enterprise Linux High Availability E4S (v.9.0) | Fixed | RHSA-2026:2303 |
| Red Hat Enterprise Linux High Availability E4S (v.9.2) | Fixed | RHSA-2026:2300 |
| Red Hat Enterprise Linux High Availability EUS (v.9.4) | Fixed | RHSA-2026:2302 |
| Red Hat Enterprise Linux High Availability TUS (v.8.6) | Fixed | RHSA-2026:2453, RHSA-2026:2486 |
| Red Hat Enterprise Linux High Availability TUS (v.8.8) | Fixed | RHSA-2026:2221, RHSA-2026:2460 |
| Red Hat Enterprise Linux HighAvailability (v. 8) | Fixed | RHSA-2026:1904, RHSA-2026:1906 |
| Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:2483, RHSA-2026:2712 |
| Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) | Fixed | RHSA-2026:2300 |
| Red Hat Enterprise Linux Resilient Storage EUS (v.9.4) | Fixed | RHSA-2026:2302 |
| Red Hat Enterprise Linux ResilientStorage (v. 8) | Fixed | RHSA-2026:1904, RHSA-2026:1906 |
| Red Hat Enterprise Linux ResilientStorage E4S (v.9.0) | Fixed | RHSA-2026:2303 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:4148 |
| Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) | Fixed | RHSA-2026:2758 |
| Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) | Fixed | RHSA-2026:2758 |
| Red Hat Enterprise Linux Server for SAP ELS (v. 7) | Fixed | RHSA-2026:2758 |
| Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7) | Fixed | RHSA-2026:2758 |
| Red Hat Migration Toolkit 1.8 | Fixed | RHSA-2026:41928 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:24977, RHSA-2026:42644 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:19712, RHSA-2026:37275, RHSA-2026:73987 |
| Red Hat OpenStack 1.5 | Fixed | RHSA-2026:14020 |
| Red Hat OpenStack Platform 16.2 | Fixed | RHSA-2026:54757 |
| Red Hat OpenStack Platform 17.1 | Fixed | RHSA-2026:28042 |
| Red Hat OpenStack Services on OpenShift 18.0 | Fixed | RHSA-2026:39894 |
| Red Hat Trusted Artifact Signer 1.3 | Fixed | RHSA-2026:24476 |
| Red Hat Trusted Artifact Signer 1.4 | Fixed | RHSA-2026:24483 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:4943 |
Not affected: 22 products
- OpenShift Service Mesh 3
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.5
- Red Hat Ansible Automation Platform 2.5 for RHEL 8
- Red Hat Ansible Automation Platform 2.5 for RHEL 9
- Red Hat Ansible Automation Platform 2.6
- Red Hat Ansible Automation Platform 2.6 for RHEL 10
- Red Hat Ansible Automation Platform 2.6 for RHEL 9
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux AI 3.3
- Red Hat Migration Toolkit 1.8
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.3
- Red Hat OpenShift Container Platform 4.17
- Red Hat OpenShift Container Platform 4.18
- Red Hat OpenStack 1.5
- Red Hat OpenStack Platform 16.2
- Red Hat OpenStack Services on OpenShift 18.0
- Red Hat Quay 3
- Red Hat Satellite 6
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-23490
- 2026-10-03 Alias added: GHSA-63vm-454h-vhhq
- 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
- 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat
References
Advisory 4
Other 62
- https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2
- https://github.com/pyasn1/pyasn1/commit/be353d755f42ea36539b4f5053c652ddf56979a6
- https://access.redhat.com/errata/RHSA-2026:4148
- https://access.redhat.com/errata/RHSA-2026:4147
- https://access.redhat.com/errata/RHSA-2026:4146
- https://access.redhat.com/errata/RHSA-2026:4145
- https://access.redhat.com/errata/RHSA-2026:4144
- https://access.redhat.com/errata/RHSA-2026:4143
- https://access.redhat.com/errata/RHSA-2026:4142
- https://access.redhat.com/errata/RHSA-2026:4141
- https://access.redhat.com/errata/RHSA-2026:4140
- https://access.redhat.com/errata/RHSA-2026:4139
- https://access.redhat.com/errata/RHSA-2026:4138
- https://access.redhat.com/errata/RHSA-2026:39894
- https://access.redhat.com/errata/RHSA-2026:3959
- https://access.redhat.com/errata/RHSA-2026:3958
- https://access.redhat.com/errata/RHSA-2026:2302
- https://access.redhat.com/errata/RHSA-2026:41928
- https://access.redhat.com/errata/RHSA-2026:42644
- https://access.redhat.com/errata/RHSA-2026:4943
- https://access.redhat.com/errata/RHSA-2026:54757
- https://access.redhat.com/errata/RHSA-2026:5606
- https://access.redhat.com/security/cve/CVE-2026-23490
- https://bugzilla.redhat.com/show_bug.cgi?id=2430472
- https://github.com/pyasn1/pyasn1
- https://github.com/pyasn1/pyasn1/blob/0f07d7242a78ab4d129b26256d7474f7168cf536/pyasn1/codec/ber/decoder.py#L496
- https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-1810.yaml
- https://pypi.org/project/pyasn1
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json
- https://access.redhat.com/errata/RHSA-2026:2300
- https://access.redhat.com/errata/RHSA-2026:2299
- https://access.redhat.com/errata/RHSA-2026:2221
- https://access.redhat.com/errata/RHSA-2026:19712
- https://access.redhat.com/errata/RHSA-2026:1906
- https://access.redhat.com/errata/RHSA-2026:1905
- https://access.redhat.com/errata/RHSA-2026:1904
- https://access.redhat.com/errata/RHSA-2026:1903
- https://access.redhat.com/errata/RHSA-2026:17611
- https://access.redhat.com/errata/RHSA-2026:17595
- https://access.redhat.com/errata/RHSA-2026:17446
- https://access.redhat.com/errata/RHSA-2026:14020
- https://access.redhat.com/errata/RHSA-2026:13553
- https://access.redhat.com/errata/RHSA-2026:13545
- https://access.redhat.com/errata/RHSA-2026:13512
- https://access.redhat.com/errata/RHSA-2026:13508
- https://access.redhat.com/errata/RHSA-2026:37275
- https://access.redhat.com/errata/RHSA-2026:3359
- https://access.redhat.com/errata/RHSA-2026:3354
- https://access.redhat.com/errata/RHSA-2026:30088
- https://access.redhat.com/errata/RHSA-2026:28042
- https://access.redhat.com/errata/RHSA-2026:2758
- https://access.redhat.com/errata/RHSA-2026:2712
- https://access.redhat.com/errata/RHSA-2026:24977
- https://access.redhat.com/errata/RHSA-2026:24866
- https://access.redhat.com/errata/RHSA-2026:2486
- https://access.redhat.com/errata/RHSA-2026:2483
- https://access.redhat.com/errata/RHSA-2026:2460
- https://access.redhat.com/errata/RHSA-2026:2453
- https://access.redhat.com/errata/RHSA-2026:24483
- https://access.redhat.com/errata/RHSA-2026:24476
- https://access.redhat.com/errata/RHSA-2026:2309
- https://access.redhat.com/errata/RHSA-2026:2303
More Pyasn1 vulnerabilities
- TI-2026-23747 pyasn1 Vulnerable to Denial of Service via Unbounded Recursion CVSS 3.1HIGH 7.5
- TI-2026-42699 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service CVSS 3.1HIGH 7.5
- TI-2026-42698 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs CVSS 3.1HIGH 7.5
- TI-2026-42700 pyasn1: Uncontrolled resource consumption when converting decoded REAL values CVSS 3.1HIGH 7.5
Sources
- CVE-2026-23490 · CVE Program
- CVE-2026-23490 · NVD
- FIRST EPSS
- GHSA-63vm-454h-vhhq · GitHub Advisory Database · CC BY 4.0
- CVE-2026-23490 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences