Summary
It was discovered that the Python stdlib ipaddress API incorrectly handled
octal strings. A remote attacker could possibly use this issue to perform a
wide variety of attacks, including bypassing certain access restrictions.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | python3.8 | 3.8.5-1~20.04.3 |
Vulnerabilities 1
-
Unscored —
In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string.…
References
-
report
https://ubuntu.com/security/CVE-2021-29921