Vulnerability · Published Jun 17, 2024 · Assigned by PSF
CVE-2024-4032Incorrect IPv4 and IPv6 private ranges
High 7.5
In plain English
A high-severity security flaw in CPython from Python Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 34.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | platform-python | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:8 | platform-python-debug | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:8 | platform-python-devel | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python-unversioned-command | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:9 | python3 | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:9 | python3-debug | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:9 | python3-devel | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:8 | python3-idle | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-idle | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:8 | python3-libs | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-libs | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:8 | python3-test | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-test | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:8 | python3-tkinter | 3.6.8-67.el8_10.alma.1 | ALSA-2024:6975 |
| AlmaLinux:9 | python3-tkinter | 3.9.18-3.el9_4.3 | ALSA-2024:4779 |
| AlmaLinux:8 | python3.11 | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11 | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-debug | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-debug | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-devel | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-devel | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-idle | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-idle | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-libs | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-libs | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-rpm-macros | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:8 | python3.11-test | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-test | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.11-tkinter | 3.11.9-7.el8_10 | ALSA-2024:6962 |
| AlmaLinux:9 | python3.11-tkinter | 3.11.7-1.el9_4.3 | ALSA-2024:4766 |
| AlmaLinux:8 | python3.12 | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12 | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-debug | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-debug | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-devel | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-devel | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-idle | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-idle | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-libs | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-libs | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-rpm-macros | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:8 | python3.12-test | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-test | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python3.12-tkinter | 3.12.5-2.el8_10 | ALSA-2024:6961 |
| AlmaLinux:9 | python3.12-tkinter | 3.12.5-2.el9 | ALSA-2024:9190 |
| AlmaLinux:8 | python39 | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-Cython | 0.29.21-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-PyMySQL | 0.10.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-attrs | 20.3.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cffi | 1.14.3-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-chardet | 3.0.4-19.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-cryptography | 3.3.1-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-debug | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-devel | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-idle | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-idna | 2.10-4.module_el8.10.0+3849+a48d89aa | ALSA-2024:5962 |
| AlmaLinux:8 | python39-iniconfig | 1.1.1-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-libs | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-lxml | 4.6.5-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-mod_wsgi | 4.7.1-7.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-more-itertools | 8.5.0-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-doc | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-numpy-f2py | 1.19.4-3.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-packaging | 20.4-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pip | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pip-wheel | 20.2.4-9.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pluggy | 0.13.1-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-ply | 3.11-10.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psutil | 5.8.0-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2 | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2-doc | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-psycopg2-tests | 2.8.6-3.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-py | 1.10.0-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11 | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pybind11-devel | 2.7.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pycparser | 2.20-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyparsing | 2.4.7-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pysocks | 1.7.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pytest | 6.0.2-2.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+3248+c431e88c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-pyyaml | 5.4.1-1.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-requests | 2.25.0-3.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-rpm-macros | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-scipy | 1.5.4-5.module_el8.9.0+3634+fb2a896c | ALSA-2024:5962 |
| AlmaLinux:8 | python39-setuptools | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-setuptools-wheel | 50.3.2-6.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-six | 1.15.0-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-test | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-tkinter | 3.9.19-7.module_el8.10.0+3885+d986a391 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-toml | 0.10.1-5.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-urllib3 | 1.25.10-5.module_el8.10.0+3765+2f9a457d | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wcwidth | 0.2.5-3.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| AlmaLinux:8 | python39-wheel-wheel | 1:0.35.1-4.module_el8.6.0+2780+a40f65e1 | ALSA-2024:5962 |
| Alpine:v3.20 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-4032 |
| Alpine:v3.21 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-4032 |
| Alpine:v3.22 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-4032 |
| Alpine:v3.23 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-4032 |
| Alpine:v3.24 | python3 | 3.12.6-r0 | ALPINE-CVE-2024-4032 |
| Debian:12 | pypy3 | no fix listed | DEBIAN-CVE-2024-4032 |
| Debian:13 | pypy3 | 7.3.18+dfsg-1 | DEBIAN-CVE-2024-4032 |
| Debian:14 | pypy3 | 7.3.18+dfsg-1 | DEBIAN-CVE-2024-4032 |
| Debian:12 | python3.11 | 3.11.2-6+deb12u3 | DSA-5759-1 |
| Debian:12 | python3.11 | 3.11.2-6+deb12u3 | DEBIAN-CVE-2024-4032 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | Cython | 0:0.29.21-5.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.9.0+1418+f0d66789 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | PyYAML | 0:5.4.1-1.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | mod_wsgi | 0:4.7.1-7.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | numpy | 0:1.19.4-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | pybind11 | 0:2.7.1-1.module+el8.9.0+1357+a3b80af7 | RLSA-2024:5962 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | pytest | 0:6.0.2-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1910+234ad790 | RLSA-2024:5962 |
| Rocky Linux:8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1592+61442852 | RLSA-2024:5962 |
| Rocky Linux:8 | python-attrs | 0:20.3.0-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-attrs | 0:20.3.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-cffi | 0:1.14.3-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.9.0+1418+f0d66789 | RLSA-2024:5962 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-chardet | 0:3.0.4-19.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-cryptography | 0:3.3.1-3.module+el8.10.0+1697+7e517775 | RLSA-2024:5962 |
| Rocky Linux:8 | python-idna | 0:2.10-4.module+el8.10.0+1809+41195054 | RLSA-2024:5962 |
| Rocky Linux:8 | python-idna | 0:2.10-4.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-iniconfig | 0:1.1.1-2.module+el8.9.0+1332+dd574197 | RLSA-2024:5962 |
| Rocky Linux:8 | python-lxml | 0:4.6.5-1.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-more-itertools | 0:8.5.0-2.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-more-itertools | 0:8.5.0-2.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-packaging | 0:20.4-4.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-packaging | 0:20.4-4.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pluggy | 0:0.13.1-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pluggy | 0:0.13.1-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.9.0+1418+f0d66789 | RLSA-2024:5962 |
| Rocky Linux:8 | python-ply | 0:3.11-10.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-psutil | 0:5.8.0-4.module+el8.9.0+1357+a3b80af7 | RLSA-2024:5962 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+1660+b5b6f004 | RLSA-2024:5962 |
| Rocky Linux:8 | python-py | 0:1.10.0-1.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-py | 0:1.10.0-1.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pycparser | 0:2.20-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-pysocks | 0:1.7.1-4.module+el8.9.0+1418+f0d66789 | RLSA-2024:5962 |
| Rocky Linux:8 | python-requests | 0:2.25.0-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-requests | 0:2.25.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-toml | 0:0.10.1-5.module+el8.9.0+1332+dd574197 | RLSA-2024:5962 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+1545+03246da9 | RLSA-2024:5962 |
| Rocky Linux:8 | python-urllib3 | 0:1.25.10-5.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-wcwidth | 0:0.2.5-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python-wcwidth | 0:0.2.5-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python-wheel | 1:0.35.1-4.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python3 | 0:3.6.8-67.el8_10.rocky.0 | RLSA-2024:6975 |
| Rocky Linux:8 | python3.11 | 0:3.11.9-7.el8_10 | RLSA-2024:6962 |
| Rocky Linux:8 | python3.12 | 0:3.12.5-2.el8_10 | RLSA-2024:6961 |
| Rocky Linux:9 | python3.12 | 0:3.12.5-2.el9_5.2 | RLSA-2024:9190 |
| Rocky Linux:8 | python39 | 0:3.9.19-7.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-9.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-pip | 0:20.2.4-9.module+el8.10.0+1721+e52d6351 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-pyparsing | 0:2.4.7-5.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-pyparsing | 0:2.4.7-5.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-setuptools | 0:50.3.2-6.module+el8.10.0+1861+0f5e39ec | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-six | 0:1.15.0-3.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | python3x-six | 0:1.15.0-3.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Rocky Linux:8 | scipy | 0:1.5.4-5.module+el8.10.0+1582+bc278001 | RLSA-2024:5962 |
| Rocky Linux:8 | scipy | 0:1.5.4-5.module+el8.10.0+1860+afcc1c71 | RLSA-2024:5962 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.12-1~22.04.5 | USN-6928-1 |
| Ubuntu:22.04:LTS | python3.10 | 3.10.12-1~22.04.5 | UBUNTU-CVE-2024-4032 |
| Ubuntu:24.04:LTS | python3.12 | 3.12.3-1ubuntu0.1 | UBUNTU-CVE-2024-4032 |
| Ubuntu:24.04:LTS | python3.12 | 3.12.3-1ubuntu0.1 | USN-6941-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Python Software Foundation | CPython | 0 – before 3.8.203.9.0 – before 3.9.203.10.0 – before 3.10.153.11.0 – before 3.11.103.12.0 – before 3.12.43.13.0a1 – before 3.13.0a6 |
Weakness: CWE-697 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://github.com/python/cpython/issues/113171 issue-tracking
- https://github.com/python/cpython/pull/113179 patch
- https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
- https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml
- https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/ vendor-advisory
- https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8 patch
- https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f patch
- https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3 patch
- https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb patch
- https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906 patch
- https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3 patch
- http://www.openwall.com/lists/oss-security/2024/06/17/3
- https://security.netapp.com/advisory/ntap-20240726-0004/
- https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html