Skip to content
OpenAdvisories

Package · Debian

libnet-cidr-set-perl

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks

    Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks. Unicode digits such as the Arabic-Indic One (U+0661) were accepted but not properly parsed as numbers. This could allow network masks to accept larger networks.

  • Medium 6.5

    Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses

    Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal number…