VULNERABILITY INTELLIGENCE
CVE-2021-29921
CVSS score9.8 CRITICAL
EPSS probability6.82%
CISA KEVNot currently listed
Published2021-05-06
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.
Primary references
- cve@mitre.org — Issue Tracking, Patch, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Patch, Third Party Advisory