Unrated
The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, wh...
CVE-2021-29662
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-29662 libdata-validate-ip-perl Fixed in: 0.30-1
Original description The description as published by the source.
The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
References
- advisory security.netapp.com
- package github.com
- patch github.com
- report blog.urth.org
- report github.com
- report sick.codes