CVE catalog

CVE-2021-47154

Net::CIDR::Lite vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.49% · Oct 25, 2026

The Net::CIDR::Lite module before 0.22 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibnet-cidr-lite-perlsid0.24-1fixed
Debianlibnet-cidr-lite-perlforky0.24-1fixed
Debianlibnet-cidr-lite-perltrixie0.22-3~deb13u2fixed
Debianlibnet-cidr-lite-perlbookworm0.22-3~deb12u2fixed
Ubuntulibnet-cidr-lite-perlnoble0.22-2ubuntu0.24.04.1fixed
Ubuntulibnet-cidr-lite-perlpro0.21-1vulnerable
Ubuntulibnet-cidr-lite-perlpro0.21-1ubuntu0.18.04.1~esm1fixed
Ubuntulibnet-cidr-lite-perl20.040.21-2vulnerable
Ubuntulibnet-cidr-lite-perl20.040.21-2ubuntu0.1fixed
Ubuntulibnet-cidr-lite-perlpro0.21-2vulnerable
Ubuntulibnet-cidr-lite-perlpro0.21-2ubuntu0.1vulnerable
Ubuntulibnet-cidr-lite-perlpro0.21-2ubuntu0.1+esm1fixed
Ubuntulibnet-cidr-lite-perl22.040.22-1vulnerable
Ubuntulibnet-cidr-lite-perl22.040.22-1ubuntu0.1fixed
Ubuntulibnet-cidr-lite-perl24.040.22-2vulnerable
Ubuntulibnet-cidr-lite-perl24.040.22-2ubuntu0.24.04.1fixed
Ubuntulibnet-cidr-lite-perl25.100.22-2vulnerable
Ubuntulibnet-cidr-lite-perl25.100.22-2ubuntu0.25.10.1fixed
Ubuntulibnet-cidr-lite-perl26.040.22-2vulnerable
Ubuntulibnet-cidr-lite-perl26.040.22-2ubuntu0.26.04.1fixed
Ubuntulibnet-cidr-lite-perl20.040.21-2vulnerable
Ubuntulibnet-cidr-lite-perl20.040.21-2ubuntu0.1fixed
Suseperl-Net-CIDR-Litelinux enterprise module for development tools 15 sp50.21-150100.6.3.1fixed
Opensuseperl-Net-CIDR-Liteleap 15.50.21-150100.6.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibnet-cidr-lite-perlsourcesid0.22-1not yet assignedNot reportedNot reported
Debianlibnet-cidr-lite-perlsourceforky0.22-1not yet assignedNot reportedNot reported
Debianlibnet-cidr-lite-perlsourcetrixie0.22-1not yet assignedNot reportedNot reported
Debianlibnet-cidr-lite-perlsourcebookworm0.22-1not yet assignedNot reportedNot reported
Ubuntulibnet-cidr-lite-perldebnoble0.22-2ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntulibnet-cidr-lite-perldebpro0.21-1ubuntu0.18.04.1~esm1Not reportedUBUNTU-CVE-2021-47154Not reported
Ubuntulibnet-cidr-lite-perldeb20.040.21-2ubuntu0.1Not reportedUBUNTU-CVE-2021-47154Not reported
Ubuntulibnet-cidr-lite-perldebpro0.21-2ubuntu0.1+esm1Not reportedUSN-8406-1Not reported
Ubuntulibnet-cidr-lite-perldeb22.040.22-1ubuntu0.1Not reportedUSN-8406-1Not reported
Ubuntulibnet-cidr-lite-perldeb24.040.22-2ubuntu0.24.04.1Not reportedUSN-8406-1Not reported
Ubuntulibnet-cidr-lite-perldeb25.100.22-2ubuntu0.25.10.1Not reportedUSN-8406-1Not reported
Ubuntulibnet-cidr-lite-perldeb26.040.22-2ubuntu0.26.04.1Not reportedUSN-8406-1Not reported
Ubuntulibnet-cidr-lite-perldeb20.040.21-2ubuntu0.1Not reportedUSN-6712-1Not reported
Suseperl-Net-CIDR-Literpmlinux enterprise module for development tools 15 sp50.21-150100.6.3.1Not reportedSUSE-SU-2024:1256-1Not reported
Opensuseperl-Net-CIDR-Literpmleap 15.50.21-150100.6.3.1Not reportedSUSE-SU-2024:1256-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libnet-cidr-lite-perl]Fixed
    Details (2)

    • 0.22-3~deb12u2 · all · bookworm

      Fixed · Fixed: 0.22-1

      usn · libnet-cidr-lite-perl · debian · bookworm; usn · libnet-cidr-lite-perl · debian · 12

    • 0.22-3~deb12u2 · all · bookworm

      Fixed · Fixed: 0.22-1

      usn · libnet-cidr-lite-perl · debian · bookworm; usn · libnet-cidr-lite-perl · debian · 12

[Debian 13 (Trixie)]

  • [libnet-cidr-lite-perl]Fixed
    Details (2)

    • 0.22-3~deb13u2 · all · trixie

      Fixed · Fixed: 0.22-1

      usn · libnet-cidr-lite-perl · debian · 13

    • 0.22-3~deb13u2 · all · trixie

      Fixed · Fixed: 0.22-1

      usn · libnet-cidr-lite-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]