Medium severity6.3OSV Advisory· Published Mar 18, 2024· Updated Apr 15, 2026

CVE-2021-47154

Description

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Net::CIDR::Lite/Net::CIDR::LiteOSV2 versions
0.21+ 1 more
- (no CPE)range: 0.21
- (no CPE)range: <0.22
osv-coords2 versions
pkg:rpm/opensuse/perl-Net-CIDR-Lite&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/perl-Net-CIDR-Lite&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5
< 0.21-150100.6.3.1+ 1 more
- (no CPE)range: < 0.21-150100.6.3.1
- (no CPE)range: < 0.21-150100.6.3.1

Patches

Vulnerability mechanics

References

blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/nvd
github.com/stigtsp/Net-CIDR-Lite/commit/23b6ff0590dc279521863a502e890ef19a5a76fcnvd
lists.debian.org/debian-lts-announce/2024/03/msg00023.htmlnvd
metacpan.org/dist/Net-CIDR-Lite/changesnvd
metacpan.org/pod/Net::CIDR::Litenvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000