Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-29424

Опубликовано: 06 апр. 2021
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:net\:\:netmask_project:net\:\:netmask:*:*:*:*:*:perl:*:*
Версия до 2.0000 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00085
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

CVSS3: 7.5
debian
почти 5 лет назад

The Net::Netmask module before 2.0000 for Perl does not properly consi ...

suse-cvrf
больше 2 лет назад

Security update for perl-Net-Netmask

suse-cvrf
больше 2 лет назад

Security update for perl-Net-Netmask

CVSS3: 7.5
github
больше 3 лет назад

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

EPSS

Процентиль: 25%
0.00085
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-704