CVEvulnerability
CVE-2024-6284
6.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-07-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.3 MEDIUM — CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-1286, CWE-1389
Description
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).
This issue affects: https://pkg.go.dev/github.com/google/[email protected]
The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/[email protected]
Affected configurations
• google nftables 0.1.0
Related
References
- https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 Issue Tracking
- https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 Exploit, Issue Tracking
- https://github.com/google/nftables/issues/225 Exploit, Issue Tracking
- https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 Issue Tracking
- https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 Exploit, Issue Tracking
- https://github.com/google/nftables/issues/225 Exploit, Issue Tracking