PT-2023-9235 · Python+12 · Cpython+12
Seth Larson
·
Published
2023-12-15
·
Updated
2026-05-05
·
CVE-2024-4032
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
CPython versions prior to 3.12.4
CPython versions prior to 3.13.0a6
Description
The issue is related to the "ipaddress" module, which contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". This affected the
is private and is global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.Recommendations
For versions prior to 3.12.4, update to CPython 3.12.4 or later to resolve the issue.
For versions prior to 3.13.0a6, update to CPython 3.13.0a6 or later to resolve the issue.
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Cpython
Centos
Debian
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu