CVE-2021-29921

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.8.0"
                },
                {
                    "last_affected": "1.8.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_automated_test_suite",
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_binding_support_function",
            "extracted_events": [
                {
                    "introduced": "1.11.0"
                },
                {
                    "last_affected": "1.11.0"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.8.0"
                },
                {
                    "last_affected": "1.8.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:communications_cloud_native_core_network_slice_selection_function",
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "extracted_events": [
                {
                    "introduced": "8.8"
                },
                {
                    "last_affected": "8.8"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "oracle:zfs_storage_appliance_kit",
            "cpes": [
                "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type

GIT

Repo

https://github.com/graalvm/graalvm-ce-builds

Events

Introduced

cf616f9f924f9e60b6158ff4aaed8306382b4c31

Last affected

a748f59635430848730ca95f41a9f7fa1f26b12b

Database specific

{
    "cpe": [
        "cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:oracle:graalvm:21.1.0:*:*:*:enterprise:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "20.3.2"
        },
        {
            "last_affected": "20.3.2"
        },
        {
            "introduced": "21.1.0"
        },
        {
            "last_affected": "21.1.0"
        }
    ]
}

Affected versions

20.*

20.3.2

21.*

21.1.0

vm-20.*

vm-20.3.2

vm-21.*

vm-21.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29921.json"

Git / github.com/python/cpython

Affected ranges

Type

GIT

Repo

https://github.com/python/cpython

Events

Introduced

fa919fdf2583bdfead1df00e842f24f30b2a34bf

Fixed

07119dd38c9a6e5da84ca8a0a46acdf8a3e60ecf

Introduced

9cf6752276e6fcfd0c23fdb064ad27f448aaaf75

Fixed

0a7dcbdb13f1f2ab6e76e1cff47e80fb263f5da0

Database specific

{
    "cpe": "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "3.8.0"
        },
        {
            "fixed": "3.8.12"
        },
        {
            "introduced": "3.9.0"
        },
        {
            "fixed": "3.9.5"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29921.json"