PUBLISHED
2026-06-04 17:16
MODIFIED
2026-06-04 17:16
EPSS (Prob. Exploit)
0.33%
Top 73.9%
> DESCRIPTION
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.
The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask.
If the argument was not a well-formed IP address, then this would lead to indefinite recursion.
An attacker could use this to cause a denial of service.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-674: Uncontrolled Recursion - The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack. | CWE-1287: Improper Validation of Specified Type of Input - The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses
AFFECTED PACKAGES:
Unknown / Unknown
8 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
04/06/2026 17:16
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-674: Uncontrolled Recursion - The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack. | CWE-1...
Total des modifications: 1
Dernière mise à jour: 4 months ago