Bug 2500041 (CVE-2026-59886) - CVE-2026-59886 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
Summary: CVE-2026-59886 pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
Keywords:
Status: NEW
Alias: CVE-2026-59886
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2501248 2501686 2501687 2501688
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-14 17:01 UTC by OSIDB Bzimport
Modified: 2026-09-29 15:55 UTC (History)
114 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:50319 0 None None None 2026-08-04 17:57:04 UTC
Red Hat Product Errata RHSA-2026:50336 0 None None None 2026-08-04 18:44:36 UTC
Red Hat Product Errata RHSA-2026:53363 0 None None None 2026-08-11 10:11:25 UTC
Red Hat Product Errata RHSA-2026:53364 0 None None None 2026-08-11 08:54:10 UTC
Red Hat Product Errata RHSA-2026:53365 0 None None None 2026-08-11 10:16:14 UTC
Red Hat Product Errata RHSA-2026:58546 0 None None None 2026-08-24 05:26:19 UTC
Red Hat Product Errata RHSA-2026:58547 0 None None None 2026-08-24 05:34:19 UTC
Red Hat Product Errata RHSA-2026:58548 0 None None None 2026-08-24 07:02:20 UTC
Red Hat Product Errata RHSA-2026:58811 0 None None None 2026-08-24 06:35:52 UTC
Red Hat Product Errata RHSA-2026:58820 0 None None None 2026-08-24 06:30:48 UTC
Red Hat Product Errata RHSA-2026:58821 0 None None None 2026-08-24 07:11:33 UTC
Red Hat Product Errata RHSA-2026:58822 0 None None None 2026-08-24 07:32:52 UTC
Red Hat Product Errata RHSA-2026:58834 0 None None None 2026-08-24 06:41:55 UTC
Red Hat Product Errata RHSA-2026:58835 0 None None None 2026-08-24 07:21:14 UTC
Red Hat Product Errata RHSA-2026:59135 0 None None None 2026-08-24 16:25:59 UTC
Red Hat Product Errata RHSA-2026:59136 0 None None None 2026-08-24 16:27:39 UTC
Red Hat Product Errata RHSA-2026:59238 0 None None None 2026-08-25 00:50:03 UTC
Red Hat Product Errata RHSA-2026:59239 0 None None None 2026-08-25 01:01:58 UTC
Red Hat Product Errata RHSA-2026:59240 0 None None None 2026-08-25 01:03:58 UTC
Red Hat Product Errata RHSA-2026:59241 0 None None None 2026-08-25 01:19:31 UTC
Red Hat Product Errata RHSA-2026:59242 0 None None None 2026-08-25 01:31:15 UTC
Red Hat Product Errata RHSA-2026:59243 0 None None None 2026-08-25 01:12:28 UTC
Red Hat Product Errata RHSA-2026:59244 0 None None None 2026-08-25 01:07:35 UTC
Red Hat Product Errata RHSA-2026:59245 0 None None None 2026-08-25 01:05:37 UTC
Red Hat Product Errata RHSA-2026:59246 0 None None None 2026-08-25 01:24:37 UTC
Red Hat Product Errata RHSA-2026:59247 0 None None None 2026-08-25 01:35:45 UTC
Red Hat Product Errata RHSA-2026:59248 0 None None None 2026-08-25 01:11:27 UTC
Red Hat Product Errata RHSA-2026:59329 0 None None None 2026-08-25 07:38:08 UTC

Description OSIDB Bzimport 2026-07-14 17:01:42 UTC 
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float conversion through prettyPrint(), str(), comparison, arithmetic, int(), or an explicit float() call to consume excessive CPU and memory and hang applications that decode untrusted ASN.1 data and then print, log, or compare decoded objects. This issue is fixed in version 0.6.4.
Comment 4 errata-xmlrpc 2026-08-04 17:56:53 UTC 
This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.5 for RHEL 9
  Red Hat Ansible Automation Platform 2.5 for RHEL 8

Via RHSA-2026:50319 https://access.redhat.com/errata/RHSA-2026:50319
Comment 5 errata-xmlrpc 2026-08-04 18:44:29 UTC 
This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.6 for RHEL 9
  Red Hat Ansible Automation Platform 2.6 for RHEL 10

Via RHSA-2026:50336 https://access.redhat.com/errata/RHSA-2026:50336
Comment 6 errata-xmlrpc 2026-08-11 08:54:03 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:53364 https://access.redhat.com/errata/RHSA-2026:53364
Comment 7 errata-xmlrpc 2026-08-11 10:11:19 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:53363 https://access.redhat.com/errata/RHSA-2026:53363
Comment 8 errata-xmlrpc 2026-08-11 10:16:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:53365 https://access.redhat.com/errata/RHSA-2026:53365
Comment 10 errata-xmlrpc 2026-08-24 05:26:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:58546 https://access.redhat.com/errata/RHSA-2026:58546
Comment 11 errata-xmlrpc 2026-08-24 05:34:13 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:58547 https://access.redhat.com/errata/RHSA-2026:58547
Comment 12 errata-xmlrpc 2026-08-24 06:30:43 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:58820 https://access.redhat.com/errata/RHSA-2026:58820
Comment 13 errata-xmlrpc 2026-08-24 06:35:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:58811 https://access.redhat.com/errata/RHSA-2026:58811
Comment 14 errata-xmlrpc 2026-08-24 06:41:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:58834 https://access.redhat.com/errata/RHSA-2026:58834
Comment 15 errata-xmlrpc 2026-08-24 07:02:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:58548 https://access.redhat.com/errata/RHSA-2026:58548
Comment 16 errata-xmlrpc 2026-08-24 07:11:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:58821 https://access.redhat.com/errata/RHSA-2026:58821
Comment 17 errata-xmlrpc 2026-08-24 07:21:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:58835 https://access.redhat.com/errata/RHSA-2026:58835
Comment 18 errata-xmlrpc 2026-08-24 07:32:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:58822 https://access.redhat.com/errata/RHSA-2026:58822
Comment 19 errata-xmlrpc 2026-08-24 16:25:54 UTC 
This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.5 for RHEL 9
  Red Hat Ansible Automation Platform 2.5 for RHEL 8

Via RHSA-2026:59135 https://access.redhat.com/errata/RHSA-2026:59135
Comment 20 errata-xmlrpc 2026-08-24 16:27:34 UTC 
This issue has been addressed in the following products:

  Red Hat Ansible Automation Platform 2.6 for RHEL 9
  Red Hat Ansible Automation Platform 2.6 for RHEL 10

Via RHSA-2026:59136 https://access.redhat.com/errata/RHSA-2026:59136
Comment 21 errata-xmlrpc 2026-08-25 00:49:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:59238 https://access.redhat.com/errata/RHSA-2026:59238
Comment 22 errata-xmlrpc 2026-08-25 01:01:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:59239 https://access.redhat.com/errata/RHSA-2026:59239
Comment 23 errata-xmlrpc 2026-08-25 01:03:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:59240 https://access.redhat.com/errata/RHSA-2026:59240
Comment 24 errata-xmlrpc 2026-08-25 01:05:31 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:59245 https://access.redhat.com/errata/RHSA-2026:59245
Comment 25 errata-xmlrpc 2026-08-25 01:07:29 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:59244 https://access.redhat.com/errata/RHSA-2026:59244
Comment 26 errata-xmlrpc 2026-08-25 01:11:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:59248 https://access.redhat.com/errata/RHSA-2026:59248
Comment 27 errata-xmlrpc 2026-08-25 01:12:22 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:59243 https://access.redhat.com/errata/RHSA-2026:59243
Comment 28 errata-xmlrpc 2026-08-25 01:19:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:59241 https://access.redhat.com/errata/RHSA-2026:59241
Comment 29 errata-xmlrpc 2026-08-25 01:24:31 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:59246 https://access.redhat.com/errata/RHSA-2026:59246
Comment 30 errata-xmlrpc 2026-08-25 01:31:09 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:59242 https://access.redhat.com/errata/RHSA-2026:59242
Comment 31 errata-xmlrpc 2026-08-25 01:35:39 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:59247 https://access.redhat.com/errata/RHSA-2026:59247
Comment 32 errata-xmlrpc 2026-08-25 07:38:02 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:59329 https://access.redhat.com/errata/RHSA-2026:59329
Note You need to log in before you can comment on or make changes to this bug.