CVE-2021-29921

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-29921
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29921.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-29921
Aliases
Downstream
Related
Published
2021-05-06T13:15:12.573Z
Modified
2026-03-10T23:33:37.264395Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

References

Affected packages

Git / github.com/graalvm/graalvm-ce-builds

Affected ranges

Type
GIT
Repo
https://github.com/graalvm/graalvm-ce-builds
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cf616f9f924f9e60b6158ff4aaed8306382b4c31
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a748f59635430848730ca95f41a9f7fa1f26b12b
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "20.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "21.1.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/python/cpython
Events
Introduced
fa919fdf2583bdfead1df00e842f24f30b2a34bf
Fixed
07119dd38c9a6e5da84ca8a0a46acdf8a3e60ecf
Introduced
9cf6752276e6fcfd0c23fdb064ad27f448aaaf75
Fixed
0a7dcbdb13f1f2ab6e76e1cff47e80fb263f5da0
Database specific 
{
    "versions": [
        {
            "introduced": "3.8.0"
        },
        {
            "fixed": "3.8.12"
        },
        {
            "introduced": "3.9.0"
        },
        {
            "fixed": "3.9.5"
        }
    ]
}

Affected versions

vm-19.*
vm-19.3.2
vm-19.3.2-pre
vm-19.3.3
vm-19.3.4
vm-19.3.5
vm-19.3.6
vm-20.*
vm-20.0.1
vm-20.1.0
vm-20.2.0
vm-20.3.0
vm-20.3.1
vm-20.3.1.2
vm-20.3.2
vm-21.*
vm-21.0.0
vm-21.0.0.2

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.11.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.8.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.8"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29921.json"