CVE-2024-6284CWE-1286CWE-1389

Improper IPv4 and IPv6 byte order storage in github.com/google/nftables

Medium · published July 3, 2024

CVSS v4.0
6.3
EPSS
0%
Percentile
20.1
In the wild
Unconfirmed
What it is

In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).

This issue affects:  https://pkg.go.dev/github.com/google/[email protected]

The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/[email protected]

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00287 · 20.1th percentile
Weaknesses
CWE-1286 · Improper Validation of Syntactic Correctness of Input; CWE-1389 · Incorrect Parsing of Numbers with Different Radices
Published
2024-07-03T22:58Z
EPSS history
Timeline
  • 03 JUL 22:58Z
    Improper IPv4 and IPv6 byte order storage in github.com/google/nftables
    cvelistv5