Advisories · Technology
RRWO Net::CIDR::Set.
Every CVE that names RRWO Net::CIDR::Set among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths
- RRWO Net::CIDR::Set
- Denial of service
- CWE-1284
- CVSS 7.3 High
Net::CIDR::Set versions through 0.20 for Perl did not validate network masks
- RRWO Net::CIDR::Set
- CWE-1289
- CVSS 7.5 High
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses
- RRWO Net::CIDR::Set
- Denial of service
- CWE-1287
- CVSS 6.5 Medium
Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks
- RRWO Net::CIDR::Set
- CWE-1289
- CVSS 6.5 Medium
Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on…
- RRWO Net::CIDR::Set
- CWE-1287