USN-8134-1: pyasn1 vulnerabilities
Affects pyasn1Source GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
- Patch
- Available – fixed in 0.1.7-1ubuntu2.1+esm1, 0.1.9-1ubuntu0.1~esm1, 0.4.2-3ubuntu0.18.04.1~esm1 +1
Data as of 16 Jul 2026, 14:26 UTC
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu:Pro:14.04:LTSpyasn1pkg:deb/ubuntu/pyasn1@0.1.7-1ubuntu2.1+esm1?arch=source&distro=esm-infra-legacy/trustyOther threats | Affected
| Fixed in
|
Ubuntu:Pro:16.04:LTSpyasn1pkg:deb/ubuntu/pyasn1@0.1.9-1ubuntu0.1~esm1?arch=source&distro=esm-infra/xenialOther threats | Affected
| Fixed in
|
Ubuntu:Pro:18.04:LTSpyasn1pkg:deb/ubuntu/pyasn1@0.4.2-3ubuntu0.18.04.1~esm1?arch=source&distro=esm-infra/bionicOther threats | Affected
| Fixed in
|
Ubuntu:Pro:20.04:LTSpyasn1pkg:deb/ubuntu/pyasn1@0.4.2-3ubuntu0.20.04.1~esm1?arch=source&distro=esm-infra/focalOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
If you cannot patch yet, consider restricting or validating inputs to pyasn1 decoding functions to prevent processing of malformed certificates.
Description
Two vulnerabilities in the pyasn1 library can lead to denial of service by exhausting system resources when decoding malformed or maliciously crafted certificates. These issues arise from uncontrolled recursion during decoding attempts. The affected versions include specific Ubuntu package versions of pyasn1. No CVSS score is provided, and no known exploits are reported in the wild.