UpHeron
All vulnerabilities

Servers and applications

CVE-2020-14422

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10,…

Severity
Medium 5.9
Published
18 Jun 2020
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.5.10, 3.6.12, 3.7.9, 3.8.4
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.0.0 before 3.5.10
  • From 3.6.0 before 3.6.12
  • From 3.7.0 before 3.7.9
  • From 3.8.0 before 3.8.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-14422
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-14422