CVE-2024-6284: falha de média gravidade em Google https://github.com/google/nftables
Improper IPv4 and IPv6 byte order storage in github.com/google/nftables
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar https://github.com/google/nftables+ Monitorar golang-github-google-nftables
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.3%
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).
This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0
The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Produtos afetados
Google · https://github.com/google/nftables