Skip to content
fr Sign in
7.5 High

CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Affected products and versions

Product Affected versions Fixed in
pyasn1 0.6 earliest → < 0.6.2 0.6.2
Red Hat Enterprise Linux Server (v. 7 ELS) Versions not published
Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) Versions not published
Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) Versions not published
Red Hat Enterprise Linux Server for SAP ELS (v. 7) Versions not published
Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7) Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 8 Versions not published
Red Hat OpenStack Platform 17.1 Versions not published
Red Hat Ansible Automation Platform 2.5 for RHEL 9 Versions not published
Show the 83 other branches
Product Affected versions Fixed in
Red Hat Ansible Automation Platform 2.6 for RHEL 9 Versions not published
Ironic content for Red Hat OpenShift Container Platform 4.17 Versions not published
Ironic content for Red Hat OpenShift Container Platform 4.18 Versions not published
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v. 8.2) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.0) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux HighAvailability (v. 8) Versions not published
Red Hat Enterprise Linux High Availability AUS (v.8.4) Versions not published
Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux High Availability E4S (v.8.6) Versions not published
Red Hat Enterprise Linux High Availability TUS (v.8.6) Versions not published
Red Hat Enterprise Linux High Availability E4S (v.8.8) Versions not published
Red Hat Enterprise Linux High Availability TUS (v.8.8) Versions not published
Red Hat Enterprise Linux High Availability E4S (v.9.0) Versions not published
Red Hat Enterprise Linux High Availability E4S (v.9.2) Versions not published
Red Hat Enterprise Linux High Availability EUS (v.9.4) Versions not published
Red Hat AI Inference Server 3.3 1782353093 earliest → < 1782353093 1782353093
Red Hat Ansible Automation Platform 2.5 1777402264 earliest → < 1777402264 1777402264
Red Hat Ansible Automation Platform 2.6 1780102732 earliest → < 1780102732 1780102732
Red Hat Ceph Storage 8 1774002867 earliest → < 1774002867 1774002867
Red Hat Enterprise Linux AI 3.3 1778666124 earliest → < 1778666124 1778666124
Red Hat OpenShift AI 2.25 1783615432 earliest → < 1783615432 1783615432
Red Hat OpenShift AI 3.3 1782471697 earliest → < 1782471697 1782471697
Red Hat OpenStack 1.5 1777436150 earliest → < 1777436150 1777436150
Red Hat Trusted Artifact Signer 1.3 1780560117 earliest → < 1780560117 1780560117
Red Hat Trusted Artifact Signer 1.4 1780914886 earliest → < 1780914886 1780914886
Red Hat Update Infrastructure 5 1773670137 earliest → < 1773670137 1773670137
Red Hat Enterprise Linux ResilientStorage (v. 8) Versions not published
Red Hat Enterprise Linux ResilientStorage E4S (v.9.0) Versions not published
Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) Versions not published
Red Hat Enterprise Linux Resilient Storage EUS (v.9.4) Versions not published
Lightspeed Core Versions not published
Migration Toolkit for Containers Versions not published
Migration Toolkit for Virtualization Versions not published
OpenShift Lightspeed Versions not published
Red Hat AI Inference Server Versions not published
Red Hat Ansible Automation Platform 2 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenStack Platform 16.2 Versions not published
Red Hat OpenStack Platform 18.0 Versions not published
Red Hat Quay 3 Versions not published
Red Hat Satellite 6 Versions not published
Red Hat Ansible Automation Platform 2.6 for RHEL 10 Versions not published
Red Hat OpenShift Container Platform 4.17 Versions not published
Red Hat OpenShift Container Platform 4.18 Versions not published
OpenShift Service Mesh 3 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 7 Extended Lifecycle Support Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 8.2 Advanced Update Support Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat OpenStack Platform 17.1 for RHEL 8 Versions not published
Red Hat OpenStack Services on OpenShift 18.0 1782387549 earliest → < 1782387549 1782387549
Service Telemetry Framework 1.5 1777436150 earliest → < 1777436150 1777436150
Red Hat Migration Toolkit 1.8 1783931722 earliest → < 1783931722 1783931722
Red Hat Migration Toolkit for Containers 1.8 1783931722 earliest → < 1783931722 1783931722

References

Timeline

  1. Published
  2. Last modified

Other CVEs of pyasn1

The 9 CVEs of pyasn1 →
CVE-2026-119197 pyasn1 is a generic ASN.1 library for Python 7.5 High CVE-2026-119196 pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding 7.5 High CVE-2026-119195 pyasn1 is a generic ASN.1 library for Python 7.5 High CVE-2026-119194 pyasn1 is a generic ASN.1 library for Python 7.5 High
Track this CVE