CVE-2024-4032

2024-06-1700:00:00

ubuntu.com

cve-2024-4032

ipaddress module

ipv4

ipv6

iana special-purpose address registries

cpython 3.12.4

cpython 3.13.0a6

unix

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

The “ipaddress” module contained incorrect information about whether
certain IPv4 and IPv6 addresses were designated as “globally reachable” or
“private”. This affected the is_private and is_global properties of the
ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and
ipaddress.IPv6Network classes, where values wouldn’t be returned in
accordance with the latest information from the IANA Special-Purpose
Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information
from these registries and thus have the intended behavior.

Bugs

<https://github.com/python/cpython/issues/113171>

Notes

Author	Note
	Priority reason: This is a low severity issue that only mis-classes certain ip addresses

OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchpython3.10< anyUNKNOWN
ubuntu22.04noarchpython3.11< anyUNKNOWN
ubuntu24.04noarchpython3.12< anyUNKNOWN
ubuntu14.04noarchpython3.4< anyUNKNOWN
ubuntu14.04noarchpython3.5< anyUNKNOWN
ubuntu16.04noarchpython3.5< anyUNKNOWN
ubuntu18.04noarchpython3.6< anyUNKNOWN
ubuntu18.04noarchpython3.7< anyUNKNOWN
ubuntu18.04noarchpython3.8< anyUNKNOWN
ubuntu20.04noarchpython3.8< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	22.04	noarch	python3.10	< any	UNKNOWN
ubuntu	22.04	noarch	python3.11	< any	UNKNOWN
ubuntu	24.04	noarch	python3.12	< any	UNKNOWN
ubuntu	14.04	noarch	python3.4	< any	UNKNOWN
ubuntu	14.04	noarch	python3.5	< any	UNKNOWN
ubuntu	16.04	noarch	python3.5	< any	UNKNOWN
ubuntu	18.04	noarch	python3.6	< any	UNKNOWN
ubuntu	18.04	noarch	python3.7	< any	UNKNOWN
ubuntu	18.04	noarch	python3.8	< any	UNKNOWN
ubuntu	20.04	noarch	python3.8	< any	UNKNOWN