tocsin

Debian/libnet-cidr-lite-perl: medium 6.5

Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass. Mask forms like "/00" and "/01" pass validation

Action: Upgrade libnet-cidr-lite-perl to 0.24-1 or later.

Affected

introducedfixedlast affected
00.24-1-

Fixed versions

0.24-1

Sources

published · modified · JSON