pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length. A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and cause availability loss. This issue is fixed in version 0.6.5.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa
    one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-
    controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER
    decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a
    left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length.
    A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and
    cause availability loss. This issue is fixed in version 0.6.5. (CVE-2026-119197)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa     one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-     controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER     decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a     left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length.
    A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and     cause availability loss. This issue is fixed in version 0.6.5. (CVE-2026-119197)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478115	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Cloud Security	Chainguard Local Security Checks	Local	high
478115	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	high
478053	SCA: security update for pyasn1 (GHSA-mm57-4v3p-rchx)	Tenable Cloud Security	SCA Checks	Local	high
478053	SCA: security update for pyasn1 (GHSA-mm57-4v3p-rchx)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
374248	Linux Distros Unpatched Vulnerability : CVE-2026-119197	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-119197

high

Tenable Plugins

high

high

high

high

high