CVE-2024-24790

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

View on CVE.org
Published Jun 5, 2024 CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Description
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-22167 The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
Ubuntu USN Ubuntu USN USN-6886-1 Go vulnerabilities
Ubuntu USN Ubuntu USN USN-7109-1 Go vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00124}

 epss

{'score': 0.00125}
Type Values Removed Values Added
Metrics epss

{'score': 0.00171}

 epss

{'score': 0.00124}
Type Values Removed Values Added
CPEs cpe:/a:redhat:ceph_storage:8.1::el9
Type Values Removed Values Added
CPEs cpe:/a:redhat:ceph_storage:7.1::el8
cpe:/a:redhat:ceph_storage:7.1::el9
Type Values Removed Values Added
First Time appeared Redhat ceph Storage
CPEs cpe:/a:redhat:ceph_storage:6.1::el9
Vendors & Products Redhat ceph Storage
Type Values Removed Values Added
First Time appeared Redhat rhdh
CPEs cpe:/a:redhat:rhdh:1.3::el9
Vendors & Products Redhat rhdh
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Redhat rhmt
CPEs cpe:/a:redhat:rhmt:1.8::el8
Vendors & Products Redhat rhmt
Type Values Removed Values Added
CPEs cpe:/a:redhat:advanced_cluster_security:4.6::el8
Type Values Removed Values Added
CPEs cpe:/a:redhat:advanced_cluster_security:4.5::el8
Type Values Removed Values Added
First Time appeared Redhat advanced Cluster Security
CPEs cpe:/a:redhat:advanced_cluster_security:4.4::el8
Vendors & Products Redhat advanced Cluster Security
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.16::el8
Type Values Removed Values Added
First Time appeared Redhat kube Descheduler Operator
CPEs cpe:/a:redhat:kube_descheduler_operator:5.1::el9
Vendors & Products Redhat kube Descheduler Operator
Type Values Removed Values Added
First Time appeared Redhat run Once Duration Override Operator
CPEs cpe:/a:redhat:run_once_duration_override_operator:1.2::el9
Vendors & Products Redhat run Once Duration Override Operator
Type Values Removed Values Added
First Time appeared Redhat satellite
CPEs cpe:/a:redhat:satellite:6.15::el8
Vendors & Products Redhat satellite
Type Values Removed Values Added
First Time appeared Redhat ansible Automation Platform
CPEs cpe:/a:redhat:ansible_automation_platform:2.4::el8
cpe:/a:redhat:ansible_automation_platform:2.4::el9
Vendors & Products Redhat ansible Automation Platform
Type Values Removed Values Added
First Time appeared Redhat cost Management
CPEs cpe:/a:redhat:cost_management:1::el8
Vendors & Products Redhat cost Management
Type Values Removed Values Added
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.12::el9
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.13::el8
cpe:/a:redhat:openshift:4.13::el9
cpe:/a:redhat:openshift:4.14::el8
cpe:/a:redhat:openshift:4.14::el9
cpe:/a:redhat:openshift:4.15::el8
cpe:/a:redhat:openshift:4.15::el9
Type Values Removed Values Added
First Time appeared Redhat openshift Data Foundation
CPEs cpe:/a:redhat:openshift:4.12::el8
cpe:/a:redhat:openshift_data_foundation:4.16::el9
Vendors & Products Redhat openshift Data Foundation
Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:8.8
cpe:/a:redhat:rhel_eus:9.2
Vendors & Products Redhat rhel Eus
Type Values Removed Values Added
First Time appeared Redhat network Observ Optr
CPEs cpe:/a:redhat:network_observ_optr:1.6.0::el9
Vendors & Products Redhat network Observ Optr
Earlier changes (18)
Weaknesses

Sources

Status
PUBLISHED
Assigner
Go
Published
Updated
Feb 13, 2025, 5:40 PM
Reserved
Jan 30, 2024, 4:05 PM

View source JSON

Updated
Sep 5, 2024, 8:03 AM

JSON

Status
Modified
Published
Jun 5, 2024, 4:15 PM
Modified
Jun 17, 2026, 7:14 AM

View source JSON

Severity
Moderate
Public date
Jun 4, 2024, 12:00 AM

View source Bugzilla JSON

No data.