CVE-2024-4032

Name of the Vulnerable Software and Affected Versions CPython versions prior to 3.12.4 CPython versions prior to 3.13.0a6

Description The issue is related to the "ipaddress" module, which contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". This affected the is private and is global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.

Recommendations For versions prior to 3.12.4, update to CPython 3.12.4 or later to resolve the issue. For versions prior to 3.13.0a6, update to CPython 3.13.0a6 or later to resolve the issue.