MGASA-2021-0376
Updated perl-Net-CIDR-Lite package fixes a security vulnerability
It was discovered that the perl Net-CIDR-Lite module did not correctly handle IP addresses with IP octets containing leading zeros. Leading zeros were ignored, while the underlying system can treat such octets as octal numbers and interpret them differently. For example, IP address of 010.0.0.1 was considered by Net CIDR-Lite to be the same address as 10.0.0.1, while system may consider it to be IP address 8.0.0.1 (rhbz# 1961865).
What each source reports
OSV No score
Updated perl-Net-CIDR-Lite package fixes a security vulnerability
It was discovered that the perl Net-CIDR-Lite module did not correctly handle IP addresses with IP octets containing leading zeros. Leading zeros were ignored, while the underlying system can treat such octets as octal numbers and interpret them differently. For example, IP address of 010.0.0.1 was considered by Net CIDR-Lite to be the same address as 10.0.0.1, while system may consider it to be IP address 8.0.0.1 (rhbz# 1961865).
- Record
MGASA-2021-0376- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perl-Net-CIDR-LiteMageia:8 |
before 0.220.0-1.mga8 | 0.220.0-1.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0376 is a vulnerability with no CVSS score yet in perl-Net-CIDR-Lite, published July 27, 2021. No source lists public exploit code. Fixed in perl-Net-CIDR-Lite 0.220.0-1.mga8.