CVE catalog

CVE-2013-1841

libnet-server-perl: CVE-2013-1841

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.93% · Oct 25, 2026

Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibnet-server-perlsid2.018-1fixed
Debianlibnet-server-perlforky2.018-1fixed
Debianlibnet-server-perltrixie2.014-1fixed
Debianlibnet-server-perlbookworm2.013-2fixed
Suseperl-Net-Serverlinux enterprise server 12 sp52.007-5.3.1fixed
Suseperl-Net-Serverlinux enterprise server for sap applications 12 sp52.007-5.3.1fixed
Suseperl-Net-Serverlinux enterprise module for basesystem 15 sp42.009-150000.3.3.1fixed
Suseperl-Net-Serverlinux enterprise real time 15 sp32.009-150000.3.3.1fixed
Opensuseperl-Net-Serverleap 15.42.009-150000.3.3.1fixed
Ubuntulibnet-server-perl14.042.007-3vulnerable
Ubuntulibnet-server-perl16.042.008-2vulnerable
Ubuntulibnet-server-perl18.042.008-4vulnerable
Ubuntulibnet-server-perl18.042.009-1vulnerable
Ubuntulibnet-server-perl20.042.009-1vulnerable
Ubuntulibnet-server-perl20.042.009-2vulnerable
Ubuntulibnet-server-perl22.042.009-2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibnet-server-perlsourcesid2.013-1lowNot reported[702914]
Debianlibnet-server-perlsourceforky2.013-1lowNot reported[702914]
Debianlibnet-server-perlsourcetrixie2.013-1lowNot reported[702914]
Debianlibnet-server-perlsourcebookworm2.013-1lowNot reported[702914]
Suseperl-Net-Serverrpmlinux enterprise server 12 sp52.007-5.3.1Not reportedSUSE-SU-2023:0759-1Not reported
Suseperl-Net-Serverrpmlinux enterprise server for sap applications 12 sp52.007-5.3.1Not reportedSUSE-SU-2023:0759-1Not reported
Suseperl-Net-Serverrpmlinux enterprise module for basesystem 15 sp42.009-150000.3.3.1Not reportedSUSE-SU-2023:0746-1Not reported
Suseperl-Net-Serverrpmlinux enterprise real time 15 sp32.009-150000.3.3.1Not reportedSUSE-SU-2023:0746-1Not reported
Opensuseperl-Net-Serverrpmleap 15.42.009-150000.3.3.1Not reportedSUSE-SU-2023:0746-1Not reported

[Debian bug #702914]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libnet-server-perl]Fixed
    Details (2)

    • 2.013-2 · all · bookworm

      Fixed · Fixed: 2.013-1

      dsa · libnet-server-perl · debian · bookworm; dsa · libnet-server-perl · debian · 12

    • 2.013-2 · all · bookworm

      Fixed · Fixed: 2.013-1

      dsa · libnet-server-perl · debian · bookworm; dsa · libnet-server-perl · debian · 12

[Debian 13 (Trixie)]

  • [libnet-server-perl]Fixed
    Details (2)

    • 2.014-1 · all · trixie

      Fixed · Fixed: 2.013-1

      dsa · libnet-server-perl · debian · 13

    • 2.014-1 · all · trixie

      Fixed · Fixed: 2.013-1

      dsa · libnet-server-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]