netmask npm package mishandles octal input data

The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This in some situations allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for...

PT-2021-18201 · Netmask · Netmask

Name of the Vulnerable Software and Affected Versions: netmask package versions prior to 2.0.1 Description: The issue arises from the netmask package's mishandling of certain unexpected characters in an IP address string. Specifically, it struggles with octal digits, such as the digit 9, under...

PT-2021-7695 · Unknown +1 · Net::Netmask +1

Name of the Vulnerable Software and Affected Versions: Net::Netmask versions prior to 2.0000 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string, which can allow attackers to bypass access control based on IP addresses...

PT-2021-17985 · Npm · Netmask

Name of the Vulnerable Software and Affected Versions: netmask npm package versions 1.0.6 and below netmask npm package versions 2.0.0 Description: The issue is related to improper input validation of octal strings in the netmask npm package, allowing unauthenticated remote attackers to perform...

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

...

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

Sql injection

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

CVE-2020-15052

An issue was discovered in Artica Proxy CE before 4.28.030.418. SQL Injection exists via the Netmask, Hostname, and Alias fields...

CVE-2020-15052

CVE-2020-15052 affects Artica Proxy CE before 4.28.030.418. The vulnerability is a SQL injection via the Netmask, Hostname, and Alias fields, stemming from insufficient validation of externally entered SQL statements in the database-backed Artica Proxy Community Edition. Connected CNVD-2020-41859...

Fedora Update for netmask FEDORA-2019-0723b8f333

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for netmask FEDORA-2019-75ee9101ea

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: netmask-2.4.4-1.fc29

This is a handy tool for generating terse netmasks in several common formats. If you've ever maintained a firewall with more than a few rules in it, you might use netmask to clean up and generalize sloppy rules left by the network administrator before you. It will also convert netmasks from one...

[SECURITY] Fedora 28 Update: netmask-2.4.4-1.fc28

This is a handy tool for generating terse netmasks in several common formats. If you've ever maintained a firewall with more than a few rules in it, you might use netmask to clean up and generalize sloppy rules left by the network administrator before you. It will also convert netmasks from one...

Fedora 29 : netmask (2019-0723b8f333)

Security bugfix buffer overflow reported at upstream 2019-01-30; updated sources Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 28 : netmask (2019-75ee9101ea)

Security bugfix buffer overflow reported at upstream 2019-01-30; updated sources Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Debian DLA-1665-1 : netmask security update

A buffer overflow was found in netmask which would crash when called with arbitrarily long inputs. For Debian 8 'Jessie', this problem has been fixed in version 2.3.12+deb8u1. We recommend that you upgrade your netmask packages. NOTE: Tenable Network Security has extracted the preceding descripti...

[SECURITY] [DLA 1665-1] netmask security update

Package : netmask Version : 2.3.12+deb8u1 Debian Bug : 921565 A buffer overflow was found in netmask which would crash when called with arbitrarily long inputs. For Debian 8 "Jessie", this problem has been fixed in version 2.3.12+deb8u1. We recommend that you upgrade your netmask packages. Furthe...

Debian: Security Advisory (DLA-1665-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...