Lucene search

K
redosRedosROS-20240917-08
HistorySep 17, 2024 - 12:00 a.m.

ROS-20240917-08

2024-09-1700:00:00
redos.red-soft.ru
python
ipaddress module
vulnerability
ip address range validation
cpython
unauthorized access
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low

Vulnerability of classes ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address and
ipaddress.IPv6Network of the ipaddress module of the Python programming language interpreter (CPython) is related to the
incorrect IP address range validation. Exploitation of the vulnerability could allow an attacker,
acting remotely, to gain unauthorized access to protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64python3< 3.8.19-6UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.8

Confidence

Low