CVE-2021-47155
No fix known EPSS <1%CVSS 9.1
The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
Products: perl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libnetwork-ipv4addr-perl | no fix |
| Debian 13 | libnetwork-ipv4addr-perl | no fix |
| Debian 14 | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 16.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 18.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 20.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 22.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 24.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 25.10 | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 26.04 LTS | libnetwork-ipv4addr-perl | no fix |
| Ubuntu 26.10 | libnetwork-ipv4addr-perl | no fix |