CVE catalog

CVE-2021-47155

libnetwork-ipv4addr-perl affected and fixed versions

[CVE catalog]

The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

Severity
Medium · CVSS 6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.51% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixielibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debiantrixielibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debiansidlibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debiansidlibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debianforkylibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debianforkylibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debianbookwormlibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debianbookwormlibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
UnknownRelease not reportedlibnetwork-ipv4addr-perlNot reportedUnknownSource applicability is not establishedProvider not reported
Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedlibnetwork-ipv4addr-perlNot reportedUnknownSource applicability is not establishedProvider not reported
Debianbookwormlibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debianbookwormlibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debianforkylibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debianforkylibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debiansidlibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debiansidlibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Debiantrixielibnetwork-ipv4addr-perlNot reportedAffectedDistribution reports no fix[CVE-2021-47155]
Debiantrixielibnetwork-ipv4addr-perl0.10.ds-4Affected[CVE-2021-47155]
Original provider fields
{
  "package_releases": [
    {
      "name": "libnetwork-ipv4addr-perl",
      "status": "vulnerable",
      "release": "sid",
      "version": "0.10.ds-4"
    },
    {
      "name": "libnetwork-ipv4addr-perl",
      "status": "vulnerable",
      "release": "forky",
      "version": "0.10.ds-4"
    },
    {
      "name": "libnetwork-ipv4addr-perl",
      "status": "vulnerable",
      "release": "trixie",
      "version": "0.10.ds-4"
    },
    {
      "name": "libnetwork-ipv4addr-perl",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "0.10.ds-4"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1072178,
      "name": "libnetwork-ipv4addr-perl",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1072178,
      "name": "libnetwork-ipv4addr-perl",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1072178,
      "name": "libnetwork-ipv4addr-perl",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": 1072178,
      "name": "libnetwork-ipv4addr-perl",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "libnetwork-ipv4addr-perl",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1072178]

Publisher notes

[trixie] libnetwork-ipv4addr-perl: Minor issue, revisit when fixed upstream [bookworm] libnetwork-ipv4addr-perl: Minor issue, revisit when fixed upstream

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libnetwork-ipv4addr-perl]Unknown
    Details (2)

    • 0.10.ds-4 · all · bookworm

      Affected

      dsa · libnetwork-ipv4addr-perl · debian · bookworm; dsa · libnetwork-ipv4addr-perl · debian · 12

    • 0.10.ds-4 · all · bookworm

      Affected

      dsa · libnetwork-ipv4addr-perl · debian · bookworm; dsa · libnetwork-ipv4addr-perl · debian · 12

[Debian 13 (Trixie)]

  • [libnetwork-ipv4addr-perl]Unknown
    Details (2)

    • 0.10.ds-4 · all · trixie

      Affected

      dsa · libnetwork-ipv4addr-perl · debian · 13

    • 0.10.ds-4 · all · trixie

      Affected

      dsa · libnetwork-ipv4addr-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]