CVEvulnerability
CVE-2021-47156
6.5 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2024-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-1287
Description
The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
Related
Weakness · CWE (1)
- CWE-1287 Improper Validation of Specified Type of Input weakness
References
- https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ blog.urth.org
- https://metacpan.org/release/Net-IPAddress-Util metacpan.org
- https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes metacpan.org
- https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ blog.urth.org
- https://metacpan.org/release/Net-IPAddress-Util metacpan.org
- https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes metacpan.org