USN-8134-1: pyasn1 vulnerabilities
Affects pyasn1Source GCVE Database
Mentioned vulnerabilities
Fixed in 0.1.7-1ubuntu2.1+esm1 : update pyasn1 when convenient.
Data as of 16 Jul 2026, 14:26 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 0.1.7-1ubuntu2.1+esm1, 0.1.9-1ubuntu0.1~esm1, 0.4.2-3ubuntu0.18.04.1~esm1 +1
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu Pro 20.04 LTSpyasn1pkg:deb/ubuntu/pyasn1@0.4.2-3ubuntu0.20.04.1~esm1?arch=source&distro=esm-infra/focalOther threats | Affected
| Fixed in
|
Ubuntu Pro 18.04 LTSpyasn1pkg:deb/ubuntu/pyasn1@0.4.2-3ubuntu0.18.04.1~esm1?arch=source&distro=esm-infra/bionicOther threats | Affected
| Fixed in
|
Ubuntu Pro 16.04 LTSpyasn1pkg:deb/ubuntu/pyasn1@0.1.9-1ubuntu0.1~esm1?arch=source&distro=esm-infra/xenialOther threats | Affected
| Fixed in
|
Ubuntu Pro 14.04 LTSpyasn1pkg:deb/ubuntu/pyasn1@0.1.7-1ubuntu2.1+esm1?arch=source&distro=esm-infra-legacy/trustyOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
If you cannot patch yet, consider restricting or validating inputs to pyasn1 decoding functions to prevent processing of malformed certificates.
Description
Two vulnerabilities in the pyasn1 library can lead to denial of service by exhausting system resources when decoding malformed or maliciously crafted certificates. These issues arise from uncontrolled recursion during decoding attempts. The affected versions include specific Ubuntu package versions of pyasn1. No CVSS score is provided, and no known exploits are reported in the wild.