Adventures in Validating IPv4 Addresses, (Thu, Oct 26th)

It should be pretty easy to validate an IP address. IPv4 addresses are 32-bit unsigned integers, and IPv6 addresses are 128-bit unsigned integers. Things get “interesting” when developers attempt to validate IP addresses as a string. There have been a few interesting vulnerabilities around this issue (CVE-2021-28918, CVE-2021-29921, CVE-2021-29418).

Article Link: https://isc.sans.edu/diary/rss/30348

1 post - 1 participant

Read full topic

address addresses adventures cve developers easy ip address ip addresses ipv4 ipv6 issue things vulnerabilities