Products
UNKNOWN
Source
cve-coordination@google.com
Tags
CVE-2024-6284 details
Published : July 3, 2024, 11:15 p.m.
Last Modified : July 3, 2024, 11:15 p.m.
Last Modified : July 3, 2024, 11:15 p.m.
Description
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-20 | Improper Input Validation | The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. |
References
| URL | Source |
|---|---|
| https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 | cve-coordination@google.com |
| https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 | cve-coordination@google.com |
| https://github.com/google/nftables/issues/225 | cve-coordination@google.com |
This website uses the NVD API, but is not approved or certified by it.