Summary
It was discovered that Net::CIDR::Lite incorrectly handled extra zero
characters at the beginning of IP address strings. A remote attacker could
possibly use this issue to bypass access controls.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libnet-cidr-lite-perl | 0.21-2ubuntu0.1 |
Vulnerabilities 1
-
Medium 6.3
The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning …
References
-
report
https://ubuntu.com/security/CVE-2021-47154