CVE-2020-14422

Python 3.6 and 3 others: Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface…

CVE-2020-14422 is fixed in 78 products on 2 platforms, first by Python 3.8 3.8.4, released July 13, 2020. 2 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: Routine.

RoutineFixed on 2 platforms
CVSS
5.9
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1271
96th percentile

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2.

Where it's fixed

ProductFixed inFixReleased
Windows apps
Python 3.7 3.7.9 Python 3.7 3.7.9 Aug 15, 2020
Python 3.8 3.8.4 Python 3.8 3.8.4 Jul 13, 2020
Linux
idle-python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 idle-python3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
idle-python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 idle-python3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
idle-python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 idle-python3.8 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
idle-python3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 idle-python3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-minimal 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-stdlib 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.6-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 libpython3.6-testsuite 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
libpython3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-stdlib 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.7-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 libpython3.7-testsuite 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
libpython3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 libpython3.8 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
libpython3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 libpython3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
libpython3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-minimal 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-stdlib · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 libpython3.8-stdlib 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
libpython3.8-stdlib · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-stdlib 3.8.2-1ubuntu1.2 Jul 13, 2020
libpython3.8-testsuite · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 libpython3.8-testsuite 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
libpython3.8-testsuite · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 libpython3.8-testsuite 3.8.2-1ubuntu1.2 Jul 13, 2020
platform-python · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
platform-python · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
platform-python-debug · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
platform-python-debug · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
platform-python-devel · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
platform-python-devel · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
python3-idle · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
python3-idle · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
python3-libs · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
python3-libs · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
python3-test · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
python3-test · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
python3-tkinter · RHEL 8 0:3.6.8-31.el8 RHSA-2020:4433 Nov 4, 2020
python3-tkinter · ol 8 0:3.6.8-31.0.1.el8 ELSA-2020-4433 Nov 10, 2020
python3.6 · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-examples · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-examples 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-minimal · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-minimal 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.6-venv · Ubuntu 18.04.6 LTS (bionic) 3.6.9-1~18.04ubuntu1.1 python3.6-venv 3.6.9-1~18.04ubuntu1.1 Jul 13, 2020
python3.7 · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-examples · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-examples 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-minimal · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-minimal 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.7-venv · Ubuntu 18.04.6 LTS (bionic) 3.7.5-2ubuntu1~18.04.2+esm3 python3.7-venv 3.7.5-2ubuntu1~18.04.2+esm3 Mar 19, 2024
python3.8 · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 python3.8 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
python3.8 · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-examples · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 python3.8-examples 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
python3.8-examples · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-examples 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-minimal · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 python3.8-minimal 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
python3.8-minimal · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-minimal 3.8.2-1ubuntu1.2 Jul 13, 2020
python3.8-venv · Ubuntu 18.04.6 LTS (bionic) 3.8.0-3ubuntu1~18.04.2+esm2 python3.8-venv 3.8.0-3ubuntu1~18.04.2+esm2 Mar 19, 2024
python3.8-venv · Ubuntu 20.04 LTS (focal) 3.8.2-1ubuntu1.2 python3.8-venv 3.8.2-1ubuntu1.2 Jul 13, 2020
python38 · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38 · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-Cython · RHEL 8 0:0.29.14-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-Cython · ol 8 0:0.29.14-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-PyMySQL · RHEL 8 0:0.9.3-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-PyMySQL · ol 8 0:0.9.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-asn1crypto · RHEL 8 0:1.2.0-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-asn1crypto · ol 8 0:1.2.0-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-babel · RHEL 8 0:2.7.0-10.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-babel · ol 8 0:2.7.0-10.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-cffi · RHEL 8 0:1.13.2-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-cffi · ol 8 0:1.13.2-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-chardet · RHEL 8 0:3.0.4-19.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-chardet · ol 8 0:3.0.4-19.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-cryptography · RHEL 8 0:2.8-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-cryptography · ol 8 0:2.8-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-debug · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-debug · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-devel · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-devel · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-idle · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-idle · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-idna · RHEL 8 0:2.8-6.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-idna · ol 8 0:2.8-6.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-jinja2 · RHEL 8 0:2.10.3-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-jinja2 · ol 8 0:2.10.3-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-libs · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-libs · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-lxml · RHEL 8 0:4.4.1-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-lxml · ol 8 0:4.4.1-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-markupsafe · RHEL 8 0:1.1.1-6.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-markupsafe · ol 8 0:1.1.1-6.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-mod_wsgi · RHEL 8 0:4.6.8-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-mod_wsgi · ol 8 0:4.6.8-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-numpy · RHEL 8 0:1.17.3-5.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-numpy · ol 8 0:1.17.3-5.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-numpy-doc · RHEL 8 0:1.17.3-5.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-numpy-doc · ol 8 0:1.17.3-5.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-numpy-f2py · RHEL 8 0:1.17.3-5.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-numpy-f2py · ol 8 0:1.17.3-5.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pip · RHEL 8 0:19.3.1-1.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-pip · ol 8 0:19.3.1-1.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pip-wheel · RHEL 8 0:19.3.1-1.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-pip-wheel · ol 8 0:19.3.1-1.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-ply · RHEL 8 0:3.11-8.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-ply · ol 8 0:3.11-8.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-psutil · RHEL 8 0:5.6.4-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-psutil · ol 8 0:5.6.4-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-psycopg2 · RHEL 8 0:2.8.4-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-psycopg2 · ol 8 0:2.8.4-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-psycopg2-doc · RHEL 8 0:2.8.4-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-psycopg2-doc · ol 8 0:2.8.4-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-psycopg2-tests · RHEL 8 0:2.8.4-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-psycopg2-tests · ol 8 0:2.8.4-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pycparser · RHEL 8 0:2.19-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-pycparser · ol 8 0:2.19-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pysocks · RHEL 8 0:1.7.1-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-pysocks · ol 8 0:1.7.1-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pytz · RHEL 8 0:2019.3-3.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-pytz · ol 8 0:2019.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-pyyaml · RHEL 8 0:5.3.1-1.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-pyyaml · ol 8 0:5.3.1-1.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-requests · RHEL 8 0:2.22.0-9.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-requests · ol 8 0:2.22.0-9.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-rpm-macros · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-rpm-macros · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-scipy · RHEL 8 0:1.3.1-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-scipy · ol 8 0:1.3.1-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-setuptools · RHEL 8 0:41.6.0-4.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-setuptools · ol 8 0:41.6.0-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-setuptools-wheel · RHEL 8 0:41.6.0-4.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-setuptools-wheel · ol 8 0:41.6.0-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-six · RHEL 8 0:1.12.0-9.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-six · ol 8 0:1.12.0-9.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-test · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-test · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-tkinter · RHEL 8 0:3.8.3-3.module+el8.3.0+7680+79e7e61a RHSA-2020:4641 Nov 4, 2020
python38-tkinter · ol 8 0:3.8.3-3.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-urllib3 · RHEL 8 0:1.25.7-4.module+el8.2.0+5234+f98739b6 RHSA-2020:4641 Nov 4, 2020
python38-urllib3 · ol 8 0:1.25.7-4.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-wheel · RHEL 8 0:0.33.6-5.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-wheel · ol 8 0:0.33.6-5.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
python38-wheel-wheel · RHEL 8 0:0.33.6-5.module+el8.3.0+7187+a27ec44b RHSA-2020:4641 Nov 4, 2020
python38-wheel-wheel · ol 8 0:0.33.6-5.module+el8.3.0+7824+e0098946 ELSA-2020-4641 Nov 10, 2020
No fix yet
Python 3.5 (Windows apps) No fix yet no-fix n/a
Python 3.6 (Windows apps) No fix yet no-fix n/a

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.