Lucene search

K
osvGoogleOSV:GO-2024-2977
HistoryJul 09, 2024 - 4:55 p.m.

IP addresses were encoded in the wrong byte order in github.com/google/nftables

2024-07-0916:55:06
Google
osv.dev
5
github
nftables
configuration
software
byte order
ip addresses

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

6.4

Confidence

High

IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which did not work as intended (might block or not block the desired addresses).

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

6.4

Confidence

High