Critical
libnetwork-ipv4addr-perl — security advisory
The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
- Products
- libnetwork-ipv4addr-perl
- Affected versions
- 0.10.ds-2, 0.10.ds-3, 0.10.ds-3.1, 0.10.ds-4
- Fixed versions
- Not specified
- CVEs
- CVE-2021-47155
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:44 UTC · Revision 1
Source evidence
The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
osv:UBUNTU-CVE-2021-47155
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
libnetwork-ipv4addr-perl
Fixed versions: Not specified
Complete source record
{
"id": "75b07b15a030d49ca7237528f83d9251d0619578112b67424a42ae1febf1259b",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2021-47155",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2021-47155",
"summary": "The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.",
"evidence": "osv:UBUNTU-CVE-2021-47155",
"products": [
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-3.1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-4",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-4",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-4",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "libnetwork-ipv4addr-perl",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.10.ds-4",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "critical",
"structured": {
"id": "UBUNTU-CVE-2021-47155",
"aliases": [
"UBUNTU-CVE-2021-47155"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"0.10.ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"0.10.ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.10.ds-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"0.10.ds-3.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-3.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"0.10.ds-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"0.10.ds-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"0.10.ds-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "libnetwork-ipv4addr-perl",
"purl": "pkg:deb/ubuntu/libnetwork-ipv4addr-perl?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"0.10.ds-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-47155.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnetwork-ipv4addr-perl",
"binary_version": "0.10.ds-4"
}
]
}
}
],
"modified": "2026-10-17T12:56:01.510896496Z",
"provider": "osv",
"upstream": [
"CVE-2021-47155"
],
"references": [
"https://ubuntu.com/security/CVE-2021-47155",
"https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/#net-ipv4addrhttpsmetacpanorgreleasenet-ipv4addr",
"https://metacpan.org/release/Net-IPv4Addr",
"https://www.cve.org/CVERecord?id=CVE-2021-47155"
]
},
"related_cves": [
{
"value": "CVE-2021-47155",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 354602,
"published_at": "2024-03-18T05:15:00+00:00"
}