CVE Feed

    Dashboard / CVE / CVE-2024-4032

    CVE-2024-4032

    The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

    Published:Jun 17, 2024
    Last Modified:Apr 15, 2026
    EPS:Jun 17, 2024
    EPSS Score:0.01127
    CVSS Score:7.5

    Affected Products

    Vendor
    Python
    Product
    Cpython
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Tus

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-120 Double Encoding
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-15 Command Delimiters
    CAPEC-182 Flash Injection
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-44 Overflow Binary Resource File
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-6 Argument Injection
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities
    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-15310 (CVSS 2.1) — When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacke…
    CVE-2026-19672 (CVSS 6.3) — The tarfile module's tar and data extraction filters created directories outside the destination for members…
    CVE-2026-15806 (CVSS 6) — The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRe…
    CVE-2026-17084 (CVSS 6) — The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unico…
    CVE-2026-18503 (CVSS 2.4) — Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and …
    CVE-2026-6879 (CVSS 2) — `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath …
    CVE-2026-15308 (CVSS 8.7) — The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated untermi…
    CVE-2026-4360 (CVSS 2) — In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An a…
    CVE-2026-11972 (CVSS 8.2) — When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not …
    CVE-2026-0864 (CVSS 4.1) — When using the "configparser" module to write configuration files containing multi-line text values with carri…

    References

    http://www.openwall.com/lists/oss-security/2024/06/17/3
    https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8
    https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f
    https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3
    https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb
    https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906
    https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3
    https://github.com/python/cpython/issues/113171
    https://github.com/python/cpython/pull/113179
    https://mail.python.org/archives/list/[email protected]/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/
    https://security.netapp.com/advisory/ntap-20240726-0004/
    https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
    https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml
    http://www.openwall.com/lists/oss-security/2024/06/17/3
    https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8
    https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f
    https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3
    https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb
    https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906
    https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3
    https://github.com/python/cpython/issues/113171
    https://github.com/python/cpython/pull/113179
    https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html
    https://mail.python.org/archives/list/[email protected]/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/
    https://security.netapp.com/advisory/ntap-20240726-0004/
    https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
    https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High