CVE-2021-47154

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected software

No affected versions have been published.

Timeline

Published
Mar 18, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2021

CVE-2021-471559.1The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situatiCVE-2021-471566.5The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (CVE-2021-471579.8The Kossy module before 0.60 for Perl allows JSON hijacking because of X-Requested-With mishandling.CVE-2021-471585.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: add error handling in sja1105_setup() If any of sjaCVE-2021-471595.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if ->get_sset_count() fails If ds->ops->get_ssetCVE-2021-471607.1In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to aCVE-2021-471615.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspiCVE-2021-471625.5In the Linux kernel, the following vulnerability has been resolved: tipc: skb_linearize the head skb when reassembling msgs It's not a gooCVE-2021-471635.5In the Linux kernel, the following vulnerability has been resolved: tipc: wait and exit until all work queues are done On some host, a craCVE-2021-471645.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix null deref accessing lag dev It could be the lag dev isCVE-2021-471655.5In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main compCVE-2021-471665.5In the Linux kernel, the following vulnerability has been resolved: NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
CVE-2021-47154: Medium severity, CVSS 6.3 | Vulnix