Description (CNA)
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Go standard library / net/netip | affected 0 before 1.21.11; affected 1.22.0-0 before 1.22.4 |
CWE
No CWE identifiers supplied.
References
- https://go.dev/cl/590316
- https://go.dev/issue/67680
- https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
- https://pkg.go.dev/vuln/GO-2024-2887
- http://www.openwall.com/lists/oss-security/2024/06/04/1
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.