CVE-2026-23490 @ Library

"CVE-2026-23490"
"pyasn1-0.1.9-2"
"Am I vulnerable?"

Status

not_applicable

Priority

2.25

Match score

4.0

Risk

DoS Remote

CVSS

7.5 HIGH

Reason

cpe: pyasn1; pkgs: pyasn1; version: in-range: pyasn1-0.1.9-2

Created

2026-08-03T20:10:50Z

Updated

2026-08-03T20:32:07Z

Closed

2026-08-03T20:32:07Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

Package	Commands
pyasn1-0.1.9-2

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: pyasn1

No packages matching “pyasn1” in inventory.

Same product CVEs in your queue

Other tickets that look like the same product (from match reason). Relate them here to triage this CVE as the primary.

CVE	CVSS	Systems	Status	Matched	Already related
CVE-2026-59885	7.5	Library	not_applicable	pyasn1	→ CVE-2026-59884
CVE-2026-30922	7.5	Library	not_applicable	pyasn1	→ CVE-2026-59884
CVE-2026-59886	7.5	Library	not_applicable	pyasn1	→ CVE-2026-59884

Related CVE (same fix)

This CVE is subordinated to primary CVE-2026-59884 — same product as CVE-2026-59884

Host OS / kernel

Debian GNU/Linux 9 (stretch) (9) · debian

Arch

x86_64

kernel_release

uname -r → 4.9.0-19-amd64

kernel_version

uname -v → #1 SMP Debian 4.9.320-2 (2022-06-30)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Determination

Related to primary CVE-2026-59884: same product as CVE-2026-59884

Update status

Add note only

Mitigation log

2026-08-03T20:32:07Z — not_applicable

Related to primary CVE-2026-59884: same product as CVE-2026-59884

References

NVD: CVE-2026-23490