CVEvulnerability

CVE-2021-29424

7.5 HIGH Published 2021-04-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-704

Description

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Affected configurations

• net\ \ netmask project (< 2.0000) • fedoraproject fedora 32 • fedoraproject fedora 33 • fedoraproject fedora 34

Related

Weakness · CWE (1)

  • CWE-704 Incorrect Type Conversion or Cast weakness

Referenced by CWE · observed example (1)

  • CWE-1389 Incorrect Parsing of Numbers with Different Radices weakness

References