Cheng Xu

**Name of the Vulnerable Software and Affected Versions** WatsonWebserver versions 4.1.3 and below IpMatcher versions 1.0.4.1 and below **Description** An Input Validation issue exists due to insufficient validation of input IP addresses and netmasks against the internal Matcher list of IP addresses and subnets. **Recommendations** For WatsonWebserver versions 4.1.3 and below, update to a version above 4.1.3 to resolve the issue. For IpMatcher versions 1.0.4.1 and below, update to a version above 1.0.4.1 to resolve the issue. As a temporary workaround, consider restricting the input of IP addresses and netmasks to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Rust versions prior to 1.53.0 **Description** The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string in the library/std/src/net/parser.rs file. This can allow attackers to bypass access control based on IP addresses due to unexpected octal interpretation, potentially leading to data integrity violations and denial of service. **Recommendations** For Rust versions prior to 1.53.0, update to version 1.53.0 or later to resolve the issue. As a temporary workaround, consider restricting access to IP addresses that may be interpreted incorrectly due to octal representation. Avoid using IP addresses with leading zeros in configurations until the issue is resolved.