Summary
It was discovered that pyasn1 incorrectly handled malformed RELATIVE-OIDs
with excessive continuation octets. An attacker could possibly use this
issue to cause pyasn1 to consume memory, leading to a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | pyasn1 | 0.4.8-1ubuntu0.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | pyasn1 | 0.4.8-4ubuntu0.1 |
| Ubuntu · 25.10 | pyasn1 | 0.6.1-1ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-23490