CNNVD-202506-3516 Information
Jun 27, 2025
cve
CNNVD ID
CNNVD-202506-3516
Related CVE
- CNNVD Published: 2025-06-27
Description (Chinese)
Net::IP::LPM是Tomas Podermanski个人开发者的一个 Perl 模块，用于实现最长前缀匹配（Longest Prefix Matching，LPM）算法。 Net::IP::LPM 1.10版本存在安全漏洞，该漏洞源于未正确处理IP地址前导零，可能导致访问控制绕过。
Description (English)
Net: :IP: :LPM is a Perl module for Tomas Podermanski personal developers to achieve maximum prefix matching (LPM). Net: :IP: :LPM version 1.10 contains a security loophole that results from an incorrect handling of the IP address lead zero, which may lead to access controls bypassing.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Live Support
Published
2025-06-27
Last Modified
2026-02-24
References
https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ https://metacpan.org/release/TPODER/Net-IP-LPM-1.10/diff/TPODER/Net-IP-LPM-1.09/lib/Net/IP/LPM.pm https://security.metacpan.org/patches/N/Net-IP-LPM/1.10/CVE-2025-40910-r1.patch
Share on: