CVE-2021-29424: 
Linux Debian vulnerability analysis and mitigation

The Net::Netmask module before version 2.0000 for Perl contains a security vulnerability where it does not properly consider extraneous zero characters at the beginning of an IP address string. The vulnerability was discovered and disclosed in March 2021, identified as CVE-2021-29424. This vulnerability affects applications using the Net::Netmask Perl module for IP address and network block manipulation (Perl Blog, MITRE CVE).

The vulnerability stems from the module's incorrect handling of IP addresses with leading zeros in octets. When parsing an IP address string with leading zeros (e.g., '010.0.0.1'), the module incorrectly processes it as a decimal number (10.0.0.1) instead of interpreting the leading zero as indicating an octal number (8.0.0.1). This behavior differs from how operating systems and standard networking tools interpret such IP addresses, where leading zeros indicate octal notation (Bleeping Computer).

The vulnerability could allow attackers to bypass access control mechanisms that are based on IP addresses. For example, an attacker could potentially access resources by using IP addresses with leading zeros that appear to be within allowed ranges but actually resolve to different addresses. This could lead to unauthorized access to protected resources or bypass of network-based security controls (Bleeping Computer).

The vulnerability was fixed in Net::Netmask version 2.0000 and later releases. Users are strongly encouraged to upgrade to the fixed version. The fix ensures that IPv4 addresses with leading zeros are no longer allowed and will return a parse error like any invalid IP address. For systems that cannot be immediately upgraded, it is recommended to sanitize and normalize IP addresses prior to passing them as inputs to the module (Perl Blog).

The vulnerability received significant attention in the security community due to its potential impact on network security controls. Multiple vendors and distributions responded by releasing security advisories and patches, including Fedora which released updates to address the vulnerability in their perl-Net-Netmask packages (Fedora Update).