Vulnerability Description
The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/#net
- https://metacpan.org/release/Net-IPv4Addr
- https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/#net
- https://metacpan.org/release/Net-IPv4Addr
FAQ
What is CVE-2021-47155?
CVE-2021-47155 is a vulnerability with a CVSS score of 9.1 (CRITICAL). The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based...
How severe is CVE-2021-47155?
CVE-2021-47155 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-47155?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.