The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0215-1 advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0217-1 advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c314017fcc advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
179422	openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0215-1)	Nessus	SuSE Local Security Checks	high
179420	openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0217-1)	Nessus	SuSE Local Security Checks	high
148805	Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)	Nessus	Fedora Local Security Checks	high
148789	Fedora 32 : perl-Net-Netmask (2021-c314017fcc)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2021-29424

high

Tenable Plugins

high

high

high

high