The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0215-1 advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0217-1 advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-be62be8c7c advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-c314017fcc advisory.

  - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at     the beginning of an IP address string, which (in some situations) allows attackers to bypass access     control that is based on IP addresses. (CVE-2021-29424)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
258507	Linux Distros Unpatched Vulnerability : CVE-2021-29424	Nessus	Misc.	high
179422	openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0215-1)	Nessus	SuSE Local Security Checks	high
179420	openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0217-1)	Nessus	SuSE Local Security Checks	high
148805	Fedora 33 : perl-Net-Netmask (2021-be62be8c7c)	Nessus	Fedora Local Security Checks	high
148789	Fedora 32 : perl-Net-Netmask (2021-c314017fcc)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2021-29424

high

Tenable Plugins

high

high

high

high

high