Lucene search
K

4 matches found

OSV
OSV
added 2024/03/06 11:6 a.m.144 views

BIT-PYTHON-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

9.8CVSS9.5AI score0.06827EPSS
Exploits1References18
Tenable Nessus
Tenable Nessus
added 2022/11/14 12:0 a.m.18 views

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2022-2740)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a...

9.8CVSS7.2AI score0.12706EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2021/11/17 3:38 p.m.0 views

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

A flaw was found in golang. Extraneous zero characters at the beginning of an IP address octet are not properly considered which could allow an attacker to bypass IP-based access controls. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

7.5CVSS7.1AI score0.03744EPSS
Exploits1References5
Prion
Prion
added 2021/05/06 1:15 p.m.83 views

Improper access control

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This in some situations allows attackers to bypass access control that is based on IP addresses...

7.5CVSS8.3AI score0.06827EPSS
Exploits1References16Affected Software6
Rows per page
Query Builder