Debian/libnet-cidr-lite-perl: medium 6.5
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation
Action: Upgrade libnet-cidr-lite-perl to 0.22-3~deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22-3~deb13u2 | - |
Fixed versions
| 0.22-3~deb13u2 |
Sources
- osv: DEBIAN-CVE-2026-45191#Debian:13/libnet-cidr-lite-perl
- https://security-tracker.debian.org/tracker/CVE-2026-45191
published · modified · JSON