Symfony NoPrivateNetworkHttpClient IPv6 Address Handling Defect

Vulnerability Overview This vulnerability involves the class in the Symfony framework, which is designed to prevent the use of IPv6 transition formats within . The specific issue is that the class extends but fails to correctly block certain IPv6 addresses (such as , etc.), leading to these address requests being incorrectly blocked. Impact Scope Affected Component: class Affected Versions: Specific versions of the Symfony framework (specific versions not explicitly stated) Impact Scenario: When is used for HTTP requests, requests from certain IPv6 addresses may be incorrectly blocked, affecting the normal operation of network communication. Remediation The fix involves correctly extending in the class to ensure all relevant IPv6 addresses are properly blocked. The specific modifications are as follows: ```php // .../Component/HttpClient/NoPrivateNetworkHttpClient.php final class NoPrivateNetworkHttpClient implements HttpClientInterface, LoggerAware { private const DEFAULTS = [ 'ipv4' => true, 'ipv6' => true, 'localhost' => true, '127.0.0.1' => true, '::1' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.255/32' => true, '0.0.0.0/32' => true, '127.0.0.0/8' => true, '10.0.0.0/8' => true, '172.16.0.0/12' => true, '192.168.0.0/16' => true, '100.64.0.0/10' => true, '169.254.0.0/16' => true, '198.18.0.0/15' => true, '198.51.100.0/24' => true, '203.0.113.0/24' => true, '240.0.0.0/4' => true, '255.255.255.25

Goal Reached Thanks to every supporter — we hit 100%!

Symfony NoPrivateNetworkHttpClient IPv6 Address Handling Defect

More from this source