Advisories · Technology
STIGTSP Net::CIDR::Lite.
Every CVE that names STIGTSP Net::CIDR::Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass
- STIGTSP Net::CIDR::Lite
- CWE-1289
- CVSS 6.5 Medium
Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass
- STIGTSP Net::CIDR::Lite
- CWE-1289
- CVSS 6.5 Medium
Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass
- STIGTSP Net::CIDR::Lite
- CWE-130
- CVSS 7.5 High
Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass
- STIGTSP Net::CIDR::Lite
- CWE-1286