CVE-2024-6284CWE-1286CWE-1389
Improper IPv4 and IPv6 byte order storage in github.com/google/nftables
Medium · published July 3, 2024
What it is
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).
This issue affects: https://pkg.go.dev/github.com/google/[email protected]
The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/[email protected]
The record
Technical detail
- CVSS v4.0
- 6.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
- EPSS
- 0.00287 · 20.1th percentile
- Weaknesses
- CWE-1286 · Improper Validation of Syntactic Correctness of Input; CWE-1389 · Incorrect Parsing of Numbers with Different Radices
- Published
- 2024-07-03T22:58Z
EPSS history
Timeline