https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T22:20:15.015715+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-f6c2-ff6x-vmmq GHSA-f6c2-ff6x-vmmq 2026-11-14T22:20:15.020408+00:00

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandled RecursionError, terminating TLS, SNMP, X.509, or LDAP parsers even with safe=True.

 https://db.gcve.eu/vuln/msrc_cve-2026-128238 msrc_CVE-2026-128238 — Scapy before 2.8.0 Uncontrolled Recursion DoS via BER SEQUENCE Decoder 2026-11-14T22:20:15.020483+00:00 msrc_CVE-2026-128238 https://db.gcve.eu/vuln/ubuntu-cve-2026-128238 UBUNTU-CVE-2026-128238 2026-11-14T22:20:15.020515+00:00

Affected: Ubuntu:16.04:LTS: scapy, Ubuntu:18.04:LTS: scapy, Ubuntu:20.04:LTS: scapy, Ubuntu:22.04:LTS: scapy, Ubuntu:24.04:LTS: scapy, Ubuntu:26.10: scapy, Ubuntu:26.04:LTS: scapy

Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQUENCE structures to trigger an unhandled RecursionError, terminating TLS, SNMP, X.509, or LDAP parsers even with safe=True.