Improper Hash Calculation in Python's IP Addressing Classes

CVE-2020-14422

What is CVE-2020-14422?

A vulnerability exists in Python's lib/ipaddress.py where the hash values for IPv4Interface and IPv6Interface classes are computed incorrectly. This miscalculation can be exploited by a remote attacker to create a denial of service, particularly affecting applications that rely on dictionaries containing IPv4Interface or IPv6Interface objects. By crafting many dictionary entries, an attacker can significantly degrade application performance. The issue has been addressed in several updated versions: 3.5.10, 3.6.12, 3.7.9, 3.8.4, 3.8.5, 3.8.6, and 3.9.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References