Security Advisories (1)
CVE-2021-47154 (2024-03-18)

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Changes for version 0.05 - 2001-10-25

  • Changed some unpack/pack code to use vec(). Thanks to Tye for the knowledge and know-how (especially on how to efficiently use the little-endian vec function on a big-endian string). Unpack/pack w/operations on strings is sometimes faster than the vec() method for some strings, but probably not in the common case.

Modules

Perl extension for merging IPv4 or IPv6 CIDR addresses