Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-6284
HistoryJul 03, 2024 - 11:15 p.m.

CVE-2024-6284

2024-07-0323:15:02
Debian Security Bug Tracker
security-tracker.debian.org
5
cve-2024-6284
nftables
ip addresses

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

7

Confidence

Low

In https://github.com/google/nftables Β IP addresses were encoded in the wrong byte order,Β resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:Β  https://pkg.go.dev/github.com/google/[email protected] The bug was fixed in the next released version:Β  https://pkg.go.dev/github.com/google/[email protected]

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

7

Confidence

Low