Threat database

A denial of service vulnerability exists in the pyasn1 BER/CER/DER decoder used by Ansible due to unbounded long-form tag IDs. The decoder accumulates continuation octets without an upper limit, allowing crafted inputs to cause excessive CPU consumption. On Python 3.11 and later, this can also trigger unhandled ValueErrors during error message formatting, potentially bypassing error handling. The issue affects decoding of untrusted BER/CER/DER input and was fixed in pyasn1 version 0.6.4 by limiting tag ID length and improving error handling.

The pyasn1 library used in Ansible is vulnerable to a Denial of Service (DoS) attack due to unbounded recursion when decoding ASN.1 data with deeply nested indefinite-length SEQUENCE or SET tags. An attacker can craft a payload that causes the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or the system runs out of memory, resulting in service disruption. This affects versions from 1.7.2 up to but not including 13.4.0_1. A fix is available in version 13.4.0_1.

A Denial-of-Service (DoS) vulnerability exists in pyasn1 version 0.6.1 used by Ansible, caused by memory exhaustion from malformed RELATIVE-OID values with excessive continuation octets during decoding. This can cause systems processing malicious ASN.1 data, such as LDAP servers or TLS endpoints, to hang or crash due to resource exhaustion. The issue is fixed in pyasn1 version 13.2.0_3.

MessagePack for Python contains a vulnerability (CVE-2026-57585) where reusing the Unpacker object after an error can cause an out-of-bounds read leading to a segmentation fault (SEGV) crash. This can result in a denial-of-service (DoS) condition if untrusted input triggers repeated errors. The issue is fixed in version 14.0.0_2. Users are advised to create a new Unpacker instance after an error instead of reusing the same one to avoid crashes and incorrect data processing.

A denial of service vulnerability (CVE-2026-15308) exists in the Python HTML parser due to repeated unterminated markup declarations. This flaw could allow an attacker to cause excessive CPU usage, leading to a denial of service condition. Red Hat has issued a security update addressing this issue in python3 packages for Red Hat Enterprise Linux 8.4. The update is rated as Important by Red Hat Product Security. No public exploit code or in-the-wild exploitation has been reported.

Red Hat JBoss Enterprise Application Platform 7.3.18 includes security fixes addressing multiple vulnerabilities such as denial of service via malicious JSON Web Encryption tokens, HTTP server failures to reject malformed host headers leading to potential cache poisoning and SSRF, denial of service vulnerabilities with temporary files in Apache CXF, and an HTTP/2 DDoS vulnerability in Undertow. This update replaces version 7.3.17 and is rated as having an important security impact by Red Hat.

Red Hat OpenShift Dev Spaces 3.28.2 includes security fixes addressing multiple vulnerabilities in Dev Spaces components, including CVE-2026-6321 and related CVEs. One notable issue involves Netty's HttpProxyHandler allowing HTTP header injection via improper validation of outbound headers in HTTP CONNECT requests. This could enable attackers to inject arbitrary headers, potentially bypassing proxy security controls. The advisory recommends applying the update after ensuring prior errata are applied.