Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8: MGASA-2021-0375 Moderate: Perl Netmask IP Access Control Bypass

mageia
Calendar Grey July 27, 2021
Dist Mageia Esm H88
The revised perl-Net-Netmask module resolves a security vulnerability associated with IP addresses in Mageia. Discover further details today!
The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows att...

Summary

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses (CVE-2021-29424).

References

- https://bugs.mageia.org/show_bug.cgi?id=29023

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/CBJVLXJSWN6DKSF5ADUEERI6M23R3GGP/

- https://www.cve.org/CVERecord?id=CVE-2021-29424

Topics%20covered

Topics Covered

security advisory access control Perl Mageia IP bypass Netmask

Resolution

SRPMS

- 8/core/perl-Net-Netmask-2.0.100-1.mga8

Publication date: 27 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0375.html
Type: security
CVE: CVE-2021-29424

Topics%20covered

Topics Covered

security advisory access control Perl Mageia IP bypass Netmask

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here