Detections
Analytics

CVE-2021-47156

high

Description

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

References

https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes

https://metacpan.org/release/Net-IPAddress-Util

https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/

Details

Source: Mitre, NVD

Published: 2024-03-18

Updated: 2024-03-18

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High