Security Advisories (1)
CVE-2021-47154 (2024-03-18)

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Changes for version 0.02 - 2001-10-23

  • Do addition with pseudo-bit manipulation (thanks to Tye for initial idea, may go to complete binary operations in the future).
  • Added IPv6 support.
  • Clean up nodes on contiguous ranges (thanks again to Tye for the idea).
  • Added more methods to simulate functionality of Net::CIDR and then some (e.g. added add_range() function).

Modules

Perl extension for merging IPv4 CIDR addresses