pyasn1, a generic ASN.1 library for Python, decodes binary REAL values with a mantissa-building routine whose run time grows quadratically with the mantissa length. An attacker who can supply ASN.1 data to an application using pyasn1 can send a comparatively small REAL value that keeps a decoding process busy on one CPU core for seconds or longer. The attack works with BER, CER and DER decoding, with or without a schema, and leads to loss of availability.
pyasn1 · pyasn1
pyasn1, a generic ASN.1 library for Python, consumes CPU quadratically when decoding constructed BIT STRING values with many fragments. An attacker who can supply crafted BER, CER or definite-length DER input can stall the decoding process. The flaw causes denial of service only, with no confidentiality or integrity impact, and applies only where an application parses untrusted ASN.1 data with pyasn1.
pyasn1 · pyasn1
pyasn1, a generic ASN.1 library for Python, has a quadratic-time flaw when decoding constructed string types and indefinite-length ANY values in BER and CER data. An attacker who can supply such data to an application that decodes it can send many fragments, which exhausts CPU on the decoding workers. The issue causes denial of service only, with no confidentiality or integrity impact. Exposure depends on whether an application decodes untrusted ASN.1 input, and pyasn1 is often used as a transitive dependency.
pyasn1 · pyasn1
pyasn1 is a generic ASN.1 Python library. Versions from 0.3.3 up to 0.6.5 store the TagSet of every decoded component in a growing set during schemaless container decoding, which causes quadratic CPU work when attacker-supplied BER, CER or DER input contains many long tag IDs with colliding hashes. An unauthenticated remote attacker can send repeated crafted inputs to exhaust decoder CPU and reduce service availability.
pyasn1 · pyasn1
