pyasn1 security vulnerabilities

pyasn1 is a Python library open-sourced by the pyasn1 maintenance organization. Versions of pyasn1 prior to 0.6.2 contained security vulnerabilities; these vulnerabilities stemmed from memory exhaustion issues when processing malformed RELATIVE-OID fields, which could lead to denial-of-service...

PT-2026-3301

Name of the Vulnerable Software and Affected Versions pyasn1 versions prior to 0.6.2 Description pyasn1, a generic ASN.1 library for Python, contains a denial-of-service issue. The issue stems from incorrect handling of malformed RELATIVE-OIDs with excessive continuation octets during decoding. A...

Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2024-2292)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: python-pyasn1

An update is available for python-pyasn1. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Critical: Red Hat Security Advisory: python-paramiko security and bug fix update

An update for python-paramiko is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Unsafe Decoding

pyasn1 performs unsafe canonical decoding. The libraries canonical decoders incorrectly decodes non-canonical variations and produces more than one valid substrate. This could potentially lead to a bypass in protection if left unchecked...

Denial Of Service (DoS)

pyasn1 is vulnerable to denial of service DoS attacks. These attacks are possible because the libraries finite length decoders could process indefinite length input for serialization. This is due to it not checking that the input is less than the maxChunkSize...

WinPayloads: Generate Undetectable Windows Payloads!

PenTestIT RSS Feed An older post of mine - MicroSploit dealt with generating backdoored documents for the Office platform. This post is about another open source framework, called WinPayloads which helps you create custom malicious payloads for the Microsoft Windows operating system. What is...

Cowrie SSH Honeypot

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen. Features Some interesting features: Fake filesystem with the ability to add/remove file...

Cowrie - SSH Honeypot

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Cowrie is directly based on Kippo by Upi Tamminen desaster. Features Some interesting features: Fake filesystem with the ability to...