There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY
    decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER
    data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET
    STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it
    also accepts constructed character strings such as UTF8String without a schema, even though those
    encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when
    asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header
    concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly
    copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy
    decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed
    in version 0.6.5. (CVE-2026-119195)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY     decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER     data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET     STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it     also accepts constructed character strings such as UTF8String without a schema, even though those     encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when     asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header     concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly     copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy     decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed     in version 0.6.5. (CVE-2026-119195)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
478054	SCA: security update for pyasn1 (GHSA-9m75-vc3g-4x39)	Tenable Cloud Security	SCA Checks	2026/10/31	2026/10/31	high
478116	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Cloud Security	Chainguard Local Security Checks	2026/10/31	2026/10/31	high
478150	Echo: pyasn1: security update to 0.6.1-1+deb13u3+e2	Tenable Cloud Security	Echo Local Security Checks	2026/11/1	2026/11/1	high
478054	SCA: security update for pyasn1 (GHSA-9m75-vc3g-4x39)	Tenable Self-Hosted Container Security	SCA Checks	2026/10/31	2026/10/31	high
478116	Chainguard: openstack-keystone-2026.2: security update to 30.0.1_git20261017-r5	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	2026/10/31	2026/10/31	high
478150	Echo: pyasn1: security update to 0.6.1-1+deb13u3+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	2026/11/1	2026/11/1	high
374123	Linux Distros Unpatched Vulnerability : CVE-2026-119195	Nessus	Misc.	2026/10/30	2026/10/31	high

检测

插件搜索

high

high

high

high

high

high

high