Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2023:0215-1

Опубликовано: 07 авг. 2023
Источник: suse-cvrf

Описание

Security update for perl-Net-Netmask

This update for perl-Net-Netmask fixes the following issues:

  • CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This (in some situations) allows attackers to bypass access control that is based on IP addresses.(boo#1184425)

Список пакетов

SUSE Package Hub 15 SP4
perl-Net-Netmask-1.9022-bp154.2.3.1
openSUSE Leap 15.4
perl-Net-Netmask-1.9022-bp154.2.3.1

Ссылки

Описание

The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Затронутые продукты
SUSE Package Hub 15 SP4:perl-Net-Netmask-1.9022-bp154.2.3.1
openSUSE Leap 15.4:perl-Net-Netmask-1.9022-bp154.2.3.1
Ссылки