top of page
perceptive_background_267k.jpg

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recu…

Published:

17 March 2026 at 23:00:00

Alert date:

18 March 2026 at 16:03:59

Source:

nvd.nist.gov

Click to open the original link from this advisory

Supply Chain & Dependencies, Web Technologies

The pyasn1 Python library versions prior to 0.6.3 are vulnerable to a Denial of Service attack through uncontrolled recursion when decoding ASN.1 data with deeply nested structures. Attackers can craft payloads with thousands of nested SEQUENCE or SET tags with Indefinite Length markers, causing the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or runs out of memory. This vulnerability is distinct from CVE-2026-23490 and affects the core ASN.1 decoding functionality. Version 0.6.3 addresses this specific recursion issue.

Technical details

Mitigation steps:

Affected products:

pyasn1

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page