Today > | 7 High | 22 Medium | 6 Low vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-6284

July 3, 2024, 11:15 p.m.

Product(s) Impacted

UNKNOWN

Description

In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:  https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/nftables@v0.2.0

Weaknesses

CWE-20
Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE ID: 20

Date

Published: July 3, 2024, 11:15 p.m.

Last Modified: July 3, 2024, 11:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve-coordination@google.com

References

https://bugs.launchpad.net/ cve-coordination@google.com

https://github.com/ cve-coordination@google.com

https://github.com/ cve-coordination@google.com