https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:22:15 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-324685 EUVD-2026-324685 https://cve.radiocsirt.org/vuln/euvd-2026-324685 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49941 <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.</p> <p>The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask.</p> <p>If the argument was not a well-formed IP address, then this would lead to indefinite recursion.</p> <p>An attacker could use this to cause a denial of service.</p> <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.</p> <p>The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask.</p> <p>If the argument was not a well-formed IP address, then this would lead to indefinite recursion.</p> <p>An attacker could use this to cause a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49941 https://cve.radiocsirt.org/vuln/ghsa-wvxw-q92g-9ghf <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.</p> <p>The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask.</p> <p>If the argument was not a well-formed IP address, then this would lead to indefinite recursion.</p> <p>An attacker could use this to cause a denial of service.</p> <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses.</p> <p>The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask.</p> <p>If the argument was not a well-formed IP address, then this would lead to indefinite recursion.</p> <p>An attacker could use this to cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-wvxw-q92g-9ghf https://cve.radiocsirt.org/vuln/opensuse-su-2026:10951-1 <p>perl-Net-CIDR-Set-0.210.0-1.1 on GA media</p> <p>perl-Net-CIDR-Set-0.210.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10951-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49941 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libnet-cidr-set-perl, Ubuntu:22.04:LTS: libnet-cidr-set-perl, Ubuntu:24.04:LTS: libnet-cidr-set-perl, Ubuntu:25.10: libnet-cidr-set-perl, Ubuntu:26.04:LTS: libnet-cidr-set-perl</p> <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask. If the argument was not a well-formed IP address, then this would lead to indefinite recursion. An attacker could use this to cause a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libnet-cidr-set-perl, Ubuntu:22.04:LTS: libnet-cidr-set-perl, Ubuntu:24.04:LTS: libnet-cidr-set-perl, Ubuntu:25.10: libnet-cidr-set-perl, Ubuntu:26.04:LTS: libnet-cidr-set-perl</p> <p>Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses. The add method called the _encode method to parse addresses. If the addresses did not look like netmasks or network ranges, then they were assumed to single IP addresses and passed back to itself as a 32-bit or 128-bit netmask. If the argument was not a well-formed IP address, then this would lead to indefinite recursion. An attacker could use this to cause a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-49941