NVD

CVE-2026-23490 Detail

Modified After Enrichment

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

Nist CVSS score does not match with CNA score

CNA: GitHub, Inc.

Base Score: 7.5 HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

ADP: redhat-SADP

Base Score: 7.5 HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
https://access.redhat.com/errata/RHSA-2026:13508	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:13512	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:13545	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:13553	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:14020	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:17446	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:17595	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:17611	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:1903	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:1904	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:1905	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:1906	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:19712	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2221	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2299	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2300	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2302	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2303	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2309	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:24476	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:24483	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2453	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2460	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2483	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2486	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:24866	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:24977	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2712	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:2758	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:28042	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:30088	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:3354	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:3359	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:3958	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:3959	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4138	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4139	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4140	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4141	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4142	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4143	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4144	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4145	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4146	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4147	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4148	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:4943	redhat-SADP
https://access.redhat.com/errata/RHSA-2026:5606	redhat-SADP
https://access.redhat.com/security/cve/CVE-2026-23490	redhat-SADP
https://bugzilla.redhat.com/show_bug.cgi?id=2430472	redhat-SADP
https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970	GitHub, Inc.	Patch
https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2	GitHub, Inc.	Product Release Notes
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq	GitHub, Inc.	Vendor Advisory
https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html	CVE	Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json	redhat-SADP

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-770	Allocation of Resources Without Limits or Throttling	GitHub, Inc. redhat-SADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

6 change records found show changes

CVE Modified by redhat-SADP 6/29/2026 11:17:31 PM

Action	Type	New Value
Added	CVSS V3.1	AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Added	CWE	CWE-770
Added	Reference	https://access.redhat.com/errata/RHSA-2026:13508
Added	Reference	https://access.redhat.com/errata/RHSA-2026:13512
Added	Reference	https://access.redhat.com/errata/RHSA-2026:13545
Added	Reference	https://access.redhat.com/errata/RHSA-2026:13553
Added	Reference	https://access.redhat.com/errata/RHSA-2026:14020
Added	Reference	https://access.redhat.com/errata/RHSA-2026:17446
Added	Reference	https://access.redhat.com/errata/RHSA-2026:17595
Added	Reference	https://access.redhat.com/errata/RHSA-2026:17611
Added	Reference	https://access.redhat.com/errata/RHSA-2026:1903
Added	Reference	https://access.redhat.com/errata/RHSA-2026:1904
Added	Reference	https://access.redhat.com/errata/RHSA-2026:1905
Added	Reference	https://access.redhat.com/errata/RHSA-2026:1906
Added	Reference	https://access.redhat.com/errata/RHSA-2026:19712
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2221
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2299
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2300
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2302
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2303
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2309
Added	Reference	https://access.redhat.com/errata/RHSA-2026:24476
Added	Reference	https://access.redhat.com/errata/RHSA-2026:24483
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2453
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2460
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2483
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2486
Added	Reference	https://access.redhat.com/errata/RHSA-2026:24866
Added	Reference	https://access.redhat.com/errata/RHSA-2026:24977
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2712
Added	Reference	https://access.redhat.com/errata/RHSA-2026:2758
Added	Reference	https://access.redhat.com/errata/RHSA-2026:28042
Added	Reference	https://access.redhat.com/errata/RHSA-2026:30088
Added	Reference	https://access.redhat.com/errata/RHSA-2026:3354
Added	Reference	https://access.redhat.com/errata/RHSA-2026:3359
Added	Reference	https://access.redhat.com/errata/RHSA-2026:3958
Added	Reference	https://access.redhat.com/errata/RHSA-2026:3959
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4138
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4139
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4140
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4141
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4142
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4143
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4144
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4145
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4146
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4147
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4148
Added	Reference	https://access.redhat.com/errata/RHSA-2026:4943
Added	Reference	https://access.redhat.com/errata/RHSA-2026:5606
Added	Reference	https://access.redhat.com/security/cve/CVE-2026-23490
Added	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=2430472
Added	Reference	https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json
Added	Affected	Record truncated, showing 2048 of 11076 characters. View Entire Change Record [{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server (v. 7 ELS)","defaultStatus":"affected","cpes":["cpe:/o:redhat:rhel_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)","defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7::server"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server for SAP ELS (v. 7)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_extras_sap_els:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux Server for SAPHANA ELS (v. 7)","defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_extras_sap_hana_els:7"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 8","defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el8","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"]},{"vendor":"Red Hat","product":"Red Hat OpenStack Platform 17.1","defaultStatus":"affected","cpes":["cpe:/a:redhat:openstack:17.1::el8"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.5 for RHEL 9","defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.5::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"]},{"vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2.6 for RHEL 9","defaultStatus":"affected","cpes":["cpe:/a:redhat:ansible_automation_platform:2.6::el9","cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9","cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"]},{"vendor":"Red Hat","product":"Ironic content for Red Hat OpenShift Container Platform 4.17","defaultStatus":"affected","cpes":["cpe:/a:redhat:openshift_ironic:4.17::el9"]},{"vendor":"Red Hat","product":"Ironic con

Initial Analysis by NIST 3/13/2026 10:19:34 AM

Action	Type	New Value
Added	CPE Configuration	OR cpe:2.3:a:pyasn1:pyasn1::::::python:: versions up to (excluding) 0.6.2
Added	CPE Configuration	OR cpe:2.3:o:debian:debian_linux:11.0:::::::
Added	Reference Type	CVE: https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html Types: Vendor Advisory
Added	Reference Type	GitHub, Inc.: https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970 Types: Patch
Added	Reference Type	GitHub, Inc.: https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2 Types: Product, Release Notes
Added	Reference Type	GitHub, Inc.: https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq Types: Vendor Advisory

New CVE Received from GitHub, Inc. 1/16/2026 2:16:19 PM

Action	Type	New Value
Added	Description	pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.
Added	CVSS V3.1	AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Added	CWE	CWE-770
Added	Reference	https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970
Added	Reference	https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2
Added	Reference	https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq

Quick Info

CVE Dictionary Entry:
CVE-2026-23490
NVD Published Date:
01/16/2026
NVD Last Modified:
06/29/2026
Source:
GitHub, Inc.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2026-23490 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by redhat-SADP 6/29/2026 11:17:31 PM

CVE Modified by CISA-ADP 6/17/2026 6:21:40 AM

CVE Modified by GitHub, Inc. 6/17/2026 6:21:40 AM

Initial Analysis by NIST 3/13/2026 10:19:34 AM

CVE Modified by CVE 2/01/2026 12:15:50 PM

New CVE Received from GitHub, Inc. 1/16/2026 2:16:19 PM

Quick Info