Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2020-14422] Hash collisions in IPv4Interface and IPv6Interface #55

Open
markmcclain opened this issue Jul 22, 2020 · 0 comments · May be fixed by #56
Open

[CVE-2020-14422] Hash collisions in IPv4Interface and IPv6Interface #55

markmcclain opened this issue Jul 22, 2020 · 0 comments · May be fixed by #56

Comments

@markmcclain
Copy link

As described in https://bugs.python.org/issue41004, the ipaddress module is vulernable to hash collisions. The upstream fix should be back ported here too.
frenzymadness added a commit to frenzymadness/ipaddress that referenced this issue Aug 3, 2020
@frenzymadness
Resolve hash collisions for IPv4Interface and IPv6Interface
b550884 
The __hash__() methods of classes IPv4Interface and IPv6Interface had issue
of generating constant hash values of 32 and 128 respectively causing hash collisions.
The fix uses the hash() function to generate hash values for the objects
instead of XOR operation

Fixes: phihag#55
@frenzymadness frenzymadness linked a pull request Aug 3, 2020 that will close this issue
Open
@axsaucedo axsaucedo mentioned this issue Aug 17, 2020
Closed
@frenzymadness frenzymadness mentioned this issue Nov 18, 2020
Open
frenzymadness added a commit to frenzymadness/ipaddress that referenced this issue Nov 20, 2020
@frenzymadness
Resolve hash collisions for IPv4Interface and IPv6Interface
cfa3166 
The __hash__() methods of classes IPv4Interface and IPv6Interface had issue
of generating constant hash values of 32 and 128 respectively causing hash collisions.
The fix uses the hash() function to generate hash values for the objects
instead of XOR operation

Fixes: phihag#55
@frenzymadness frenzymadness mentioned this issue Nov 20, 2020
Open
This was referenced Dec 26, 2022
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

[CVE-2020-14422] Resolve hash collisions for IPv4Interface and IPv6Interface frenzymadness/ipaddress
1 participant
@markmcclain