2 matches found
python-pyasn1: pyasn1: Denial of Service via crafted BER input
A flaw was found in pyasn1, a generic ASN.1 library for Python. The Basic Encoding Rules BER decoder, used by CER and DER codecs, processes long-form tags by accumulating continuation octets without an upper bound. A remote attacker can exploit this by providing a specially crafted input, leading...
7.5CVSS5.5AI score0.00349EPSS
SaveExploits0References7
UBUNTU-CVE-2026-59884
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...
7.5CVSS6.1AI score0.00349EPSS
SaveExploits0References5
20