CVE-2024-24790

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

Open
MEDIUM (4.5)
  • T

    Tim Bastin detected CVE-2024-24790 with a risk of 4.5

  • logo

    System updated the risk assessment from 4.5 to 2.25

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-24790

  • T

    Tim Bastin detected CVE-2024-24790 with a risk of 4.5

  • logo

    System updated the risk assessment from 4.5 to 2.25

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 2.25 to 4.5

    System recalculated raw risk assessment

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • T

    Tim Bastin fixed CVE-2024-24790

  • logo

    System detected CVE-2024-24790 with a risk of 4.5

  • T

    Tim Bastin fixed CVE-2024-24790

  • logo

    System detected CVE-2024-24790 with a risk of 4.5

Add a comment

Mark as False Positive
Last calculated at:

Affected component

Logo von golang stdlib

Installed version:
1.21.8
Fixed in:
v1.21.11

Quick Fix

Update all Dependencies
Update only stdlib
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f