Debian/libnet-cidr-set-perl: medium 6.5
Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP
Action: Upgrade libnet-cidr-set-perl to 0.15-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15-1 | - |
Fixed versions
| 0.15-1 |
Sources
- osv: DEBIAN-CVE-2025-40911#Debian:13/libnet-cidr-set-perl
- https://security-tracker.debian.org/tracker/CVE-2025-40911
published · modified · JSON