« Volver al listado

CVE-2021-47156

Estado: AplazadaMedia (6.5)—

The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Perl — NET Ipaddress UtilAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-47156",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2021-47156",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-03-18T15:35:36.287667Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2024-03-18T05:15:06.260",
  "references": [
    {
      "url": "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://metacpan.org/release/Net-IPAddress-Util",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://metacpan.org/release/Net-IPAddress-Util",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses."
    },
    {
      "lang": "es",
      "value": "El módulo Net::IPAddress::Util anterior a 5.000 para Perl no considera adecuadamente los caracteres cero extraños en una cadena de dirección IP, lo que (en algunas situaciones) permite a los atacantes eludir el control de acceso basado en direcciones IP."
    }
  ],
  "lastModified": "2026-06-17T04:16:43.430",
  "sourceIdentifier": "cve@mitre.org"
}