pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it also accepts constructed character strings such as UTF8String without a schema, even though those encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed in version 0.6.5.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY
    decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER
    data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET
    STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it
    also accepts constructed character strings such as UTF8String without a schema, even though those
    encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when
    asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header
    concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly
    copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy
    decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed
    in version 0.6.5. (CVE-2026-119195)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY     decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER     data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET     STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it     also accepts constructed character strings such as UTF8String without a schema, even though those     encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when     asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header     concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly     copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy     decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed     in version 0.6.5. (CVE-2026-119195)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478116	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
478116	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
478054	SCA: security update for pyasn1 (GHSA-9m75-vc3g-4x39)	Tenable Cloud Security	SCA Checks	Local	high
478054	SCA: security update for pyasn1 (GHSA-9m75-vc3g-4x39)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
374123	Linux Distros Unpatched Vulnerability : CVE-2026-119195	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-119195

high

Tenable Plugins

high

high

high

high

high