CVE-2026-23490

high Red Hat
CVSS v3 Base Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: January 16, 2026
Last Modified: January 16, 2026
Vendor: Red Hat

Description

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

CWE

CWE-770

Affected Products

Fence Agents Remediation OperatorMigration Toolkit for ContainersMigration Toolkit for VirtualizationOpenShift LightspeedOpenShift Service Mesh 2OpenShift Service Mesh 3Red Hat Advanced Cluster Management for Kubernetes 2Red Hat AI Inference ServerRed Hat Ansible Automation Platform 2Red Hat Ceph Storage 7

Fix Status

✅ Fix Available

References

🔗 bugzilla.redhat.com 🔗 www.cve.org 🔗 nvd.nist.gov 🔗 github.com 🔗 github.com