CVE-2024-6284

Katalog CVE

CVSS 7.3 · High EPSS 0,29%

Kerentanan Improper Validation of Syntactic Correctness of Input pada google nftables. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:  https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/nftables@v0.2.0

Rincian

Terbit di NVD

3 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1286: Improper Validation of Syntactic Correctness of Input
CWE-1389: Incorrect Parsing of Numbers with Different Radices

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 exploit · issue tracking
• https://github.com/google/nftables/issues/225 exploit · issue tracking
• https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 issue tracking