MGASA-2021-0376

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0376.html

Import Source

https://advisories.mageia.org/MGASA-2021-0376.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0376

Published

2021-07-27T20:21:53Z

Modified

2026-04-16T04:24:40.940683Z

Summary

Updated perl-Net-CIDR-Lite package fixes a security vulnerability

Details

It was discovered that the perl Net-CIDR-Lite module did not correctly handle IP addresses with IP octets containing leading zeros. Leading zeros were ignored, while the underlying system can treat such octets as octal numbers and interpret them differently. For example, IP address of 010.0.0.1 was considered by Net CIDR-Lite to be the same address as 10.0.0.1, while system may consider it to be IP address 8.0.0.1 (rhbz# 1961865).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:8 / perl-Net-CIDR-Lite

Package

Name: perl-Net-CIDR-Lite
Purl: pkg:rpm/mageia/perl-Net-CIDR-Lite?arch=source&distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.220.0-1.mga8

Ecosystem specific

{
    "section": "core"
}

Database specific

source

"https://advisories.mageia.org/MGASA-2021-0376.json"