Nixpkgs security tracker

Untriaged

Permalink CVE-2026-30922

7.5 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

created 1 month, 3 weeks ago Activity log

Created suggestion 1 month, 3 weeks ago

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.

References

https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r x_refsource_CONFIRM
https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0 x_refsource_MISC

Affected products

pyasn1

==< 0.6.3

Matching in nixpkgs

pkgs.python312Packages.pyasn1

Generic ASN.1 library for Python

nixos-25.11 pyasn1-0.6.2
- nixos-25.11-small pyasn1-0.6.2
- nixpkgs-25.11-darwin pyasn1-0.6.2

pkgs.python313Packages.pyasn1

Generic ASN.1 library for Python

nixos-unstable pyasn1-0.6.2
- nixpkgs-unstable pyasn1-0.6.2
- nixos-unstable-small pyasn1-0.6.2
nixos-25.11 pyasn1-0.6.2
- nixos-25.11-small pyasn1-0.6.2
- nixpkgs-25.11-darwin pyasn1-0.6.2

pkgs.python314Packages.pyasn1

Generic ASN.1 library for Python

nixos-unstable pyasn1-0.6.2
- nixpkgs-unstable pyasn1-0.6.2
- nixos-unstable-small pyasn1-0.6.2

pkgs.python312Packages.pysnmp-pyasn1

Python ASN.1 encoder and decoder

nixos-25.11 pyasn1-1.1.3
- nixos-25.11-small pyasn1-1.1.3
- nixpkgs-25.11-darwin pyasn1-1.1.3

pkgs.python313Packages.pysnmp-pyasn1

Python ASN.1 encoder and decoder

nixos-unstable pyasn1-1.1.3
- nixpkgs-unstable pyasn1-1.1.3
- nixos-unstable-small pyasn1-1.1.3
nixos-25.11 pyasn1-1.1.3
- nixos-25.11-small pyasn1-1.1.3
- nixpkgs-25.11-darwin pyasn1-1.1.3