Improper Input Validation

2024-07-0407:58:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

github

google

nftables

vulnerability

ip addresses

byte order

configuration

blocking

CVSS4

6.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/SC:L/VI:L/SI:L/VA:L/SA:L

AI Score

Confidence

High

JSON

github.com/google/nftables/ is vulnerable to Improper Input Validation. The vulnerability is due to IP addresses being encoded in the wrong byte order, resulting in a non-functional nftables configuration which might block or not block the desired addresses.