Net::CIDR::Set vulnerabilities
3 known vulnerabilities in Net::CIDR::Set from RRWO. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Net::CIDR::Set: Memory Allocation with Excessive Size Value
Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The _encode method accepts any prefix length matching `(0|[1-9][0-9]*)` and passes it to _width2bits(), which builds the mask as `'
- 7.3 High severity
Net::CIDR::Set: Improper Validation of Unsafe Equivalence in Input
Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of a network mask could contain Unicode digits such as the Arabic-Indic One (U+0661), or non-digits, which were ignored. This could allow network masks to accept lar
- 7.5 High severity
Net::CIDR::Set: Uncontrolled Recursion
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed ba