CVE-2024-6284mediumCWE-1286CWE-1389

CVE-2024-6284: medium-severity vulnerability in Google https://github.com/google/nftables

Improper IPv4 and IPv6 byte order storage in github.com/google/nftables

Published · Updated

Follow this CVE+ Monitor https://github.com/google/nftables+ Monitor golang-github-google-nftables

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 0.3%
In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:  https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/nftables@v0.2.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Affected products
Google · https://github.com/google/nftables