Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1256-1

Опубликовано: 12 апр. 2024
Источник: suse-cvrf

Описание

Security update for perl-Net-CIDR-Lite

This update for perl-Net-CIDR-Lite fixes the following issues:

  • CVE-2021-47154: Fixed leading zeroes in IPv4 octets may allow attackers to bypass certain access controls (bsc#1221564).

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP5
perl-Net-CIDR-Lite-0.21-150100.6.3.1
openSUSE Leap 15.5
perl-Net-CIDR-Lite-0.21-150100.6.3.1

Ссылки

Описание

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP5:perl-Net-CIDR-Lite-0.21-150100.6.3.1
openSUSE Leap 15.5:perl-Net-CIDR-Lite-0.21-150100.6.3.1
Ссылки