A denial of service vulnerability exists in the pyasn1 BER/CER/DER decoder used by s3ql, caused by unbounded long-form tag IDs. The decoder accumulates continuation octets without an upper limit, allowing crafted inputs to cause excessive CPU usage. On Python 3.11 and later, this can also trigger unhandled ValueError exceptions, potentially bypassing error handling. The issue affects decoding of untrusted BER/CER/DER inputs and was fixed in pyasn1 version 0.6.4 by limiting tag ID length and improving error handling.