Lucene search
UbuntuUSN-6941-1HistoryAug 01, 2024 - 12:00 a.m.
Python vulnerability
2024-08-0100:00:00
ubuntu.com
9
python
ipaddress module
ubuntu 24.04 lts
incorrect information
private ip
security policies
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.9
Confidence
Low
Releases
- Ubuntu 24.04 LTS
Packages
- python3.12 - An interactive high-level object-oriented language
Details
It was discovered that the Python ipaddress module contained incorrect
information about which IP address ranges were considered “private” or
“globally reachable”. This could possibly result in applications applying
incorrect security policies.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | python3.12 | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | idle-python3.12 | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12-dev | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12-minimal | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12-stdlib | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12-testsuite | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12t64 | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libpython3.12t64-dbg | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | python3.12-dbg | < 3.12.3-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 24.04 | noarch | python3.12-dev | < 3.12.3-1ubuntu0.1 | UNKNOWN |
References
Related
osv
osv
CGA-chrf-8g9f-pwqw
2024-07-15 21:56:04
CVE-2024-4032
2024-06-17 15:15:52
CGA-9756-5pcx-hp5w
2024-07-15 21:54:19
fedora
fedora
[SECURITY] Fedora 40 Update: python3.12-3.12.4-1.fc40
2024-07-05 06:22:01
[SECURITY] Fedora 39 Update: mingw-python3-3.11.8-2.fc39
2024-07-12 04:18:48
[SECURITY] Fedora 40 Update: mingw-python3-3.11.8-2.fc40
2024-07-12 04:19:05
nessus
nessus
Photon OS 4.0: Python3 PHSA-2024-4.0-0662
2024-08-03 00:00:00
Fedora 40 : python3.6 (2024-732aedeb4d)
2024-07-13 00:00:00
Oracle Linux 9 : python3 (ELSA-2024-4779)
2024-07-24 00:00:00
debiancve
debiancve
CVE-2024-4032
2024-06-17 15:15:52
almalinux
almalinux
Low: python3 security update
2024-07-23 00:00:00
Low: python3 security update
2024-07-23 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-08-28 00:00:00
cve
cve
CVE-2024-4032
2024-06-17 15:15:52
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-732aedeb4d)
2024-08-06 00:00:00
Python IP Ranges Vulnerability (Jun 2024) - Windows
2024-06-18 00:00:00
Python IP Ranges Vulnerability (Jun 2024) - Mac OS X
2024-06-18 00:00:00
redos
redos
ROS-20240917-08
2024-09-17 00:00:00
ubuntucve
ubuntucve
CVE-2024-4032
2024-06-17 00:00:00
oraclelinux
oraclelinux
python3 security update
2024-07-23 00:00:00
python3 security update
2024-07-23 00:00:00
python39:3.9 and python39-devel:3.9 security update
2024-08-29 00:00:00
cvelist
cvelist
CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges
2024-06-17 15:05:58
alpinelinux
alpinelinux
CVE-2024-4032
2024-06-17 15:15:52
redhatcve
redhatcve
CVE-2024-4032
2024-06-18 17:29:49
redhat
redhat
(RHSA-2024:6030) Low: python3 security update
2024-08-29 11:16:43
(RHSA-2024:4779) Low: python3 security update
2024-07-23 15:13:23
(RHSA-2024:4766) Low: python3 security update
2024-07-23 15:13:20
wolfi
wolfi
CVE-2024-4032 vulnerabilities
2024-09-18 21:11:55
nvd
nvd
CVE-2024-4032
2024-06-17 15:15:52
vulnrichment
vulnrichment
CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges
2024-06-17 15:05:58
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0334
2024-07-26 00:00:00
Important Photon OS Security Update - PHSA-2024-4.0-0662
2024-08-02 00:00:00
ubuntu
ubuntu
Python vulnerabilities
2024-07-30 00:00:00
aix
aix
ibm
ibm
Security Bulletin: AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032, CVE-2024-37891) due to Python
2024-09-17 23:09:34
slackware
slackware
[slackware-security] python3
2024-09-09 01:06:11
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.9
Confidence
Low
Related for USN-6941-1