Vulnerability details
CVE-2026-30922
Red Hat Migration Toolkit for ContainersRed Hat Migration Toolkit for VirtualizationRed Hat OpenShift LightspeedRed Hat AI Inference ServerRed Hat Ansible Automation Platform 2Red Hat OpenShift AI
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
CVSS 3.1
7.5High
Official description
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Migration Toolkit for Containers | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | All | CVEProject cvelistV5 (CNA) |
| pyasn1 | pyasn1 | < 0.6.3 | CVEProject cvelistV5 (CNA) |
References and advisories
44- http://www.openwall.com/lists/oss-security/2026/03/20/4
- https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html
- https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r x_refsource_CONFIRM
- https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-30922 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2448553 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:24761 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13512 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24762 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13508 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17083 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13916 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19138 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12176 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22135 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22134 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20588 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22987 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22969 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22970 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13917 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19355 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13902 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22133 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22132 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22131 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:16009 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13553 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13545 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6309 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17611 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10184 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:14020 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6912 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6720 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6926 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8437 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-03-18
- Last updated
- 2026-09-17
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.83%
Probability of exploitation in 30 days
57.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Proof of concept
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-674Uncontrolled Recursion
- CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')