BIT-python-2024-4032

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2024-4032.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-python-2024-4032

Aliases

Published

2024-06-20T11:17:24Z

Modified

2026-05-11T18:30:11Z

Summary

Incorrect IPv4 and IPv6 private ranges

Details

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.

CPython 3.12.4 and 3.13.0 contain updated information from these registries and thus have the intended behavior.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity":  "High"
}

References

Affected packages

Bitnami / python

Package

Name: python
Purl: pkg:bitnami/python

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.8.20

Introduced

3.9.0

Fixed

3.9.20

Introduced

3.10.0

Fixed

3.10.15

Introduced

3.11.0

Fixed

3.11.10

Introduced

3.12.0

Fixed

3.12.4

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2024-4032.json"