Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10 v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4 v3.8.4rc1 v3.8.5 v3.8.6 v3.8.6rc1; v3.9.0 v3.9.0b4 v3.9.0b5 v3.9.0rc1 v3.9.0rc2.

🗓️ 10 Nov 2020 00:00:00Reported by MicrosoftType

Python ipaddress hash bug in IPv4Interface and IPv6Interface may cause DoS via large dictionaries.

Reporter	Title	Published	Views	Family All 307
FreeBSD	Python -- multiple vulnerabilities	19 Aug 202000:00	–	freebsd
FreeBSD	Python -- multiple vulnerabilities	17 Jun 202000:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Python3 affect IBM Cloud Pak for Multicloud Management Hybrid GRC.	4 Feb 202121:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Match 360 is vulnerable to Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes (CVE-2020-14422)	6 Jul 202301:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-14422	11 Mar 202110:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Python vulnerability (CVE-2020-14422)	27 Sep 202019:48	–	ibm
Tenable Nessus	Amazon Linux 2 : python3 (ALAS-2020-1484)	2 Sep 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-pip (ALAS-2023-2151)	20 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-ipaddress (ALAS-2023-2174)	26 Jul 202300:00	–	nessus