CVE-2024-6284

In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/[email protected] The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/[email protected]

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596	Issue Tracking
https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368	Exploit Issue Tracking
https://github.com/google/nftables/issues/225	Exploit Issue Tracking
https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596	Issue Tracking
https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368	Exploit Issue Tracking
https://github.com/google/nftables/issues/225	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:nftables:0.1.0:*:*:*:*:go:*:*

History

No history.

Information

Published : 2024-07-03 23:15

Updated : 2025-09-26 17:02

NVD link : CVE-2024-6284

Mitre link : CVE-2024-6284

CVE.ORG link : CVE-2024-6284

JSON object : View

Products Affected

google

nftables

CWE

CWE-1286

Improper Validation of Syntactic Correctness of Input

CWE-1389

Incorrect Parsing of Numbers with Different Radices

NVD-CWE-noinfo

{"id": "CVE-2024-6284", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2024-07-03T23:15:02.333", "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596", "tags": ["Issue Tracking"], "source": "[email protected]"}, {"url": "https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368", "tags": ["Exploit", "Issue Tracking"], "source": "[email protected]"}, {"url": "https://github.com/google/nftables/issues/225", "tags": ["Exploit", "Issue Tracking"], "source": "[email protected]"}, {"url": "https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596", "tags": ["Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368", "tags": ["Exploit", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/google/nftables/issues/225", "tags": ["Exploit", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-1286"}, {"lang": "en", "value": "CWE-1389"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In https://github.com/google/nftables \u00a0IP addresses were encoded in the wrong byte order,\u00a0resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).\n\nThis issue affects:\u00a0 https://pkg.go.dev/github.com/google/[email protected] \n\nThe bug was fixed in the next released version:\u00a0 https://pkg.go.dev/github.com/google/[email protected]"}, {"lang": "es", "value": "En https://github.com/google/nftables, las direcciones IP se codificaron en el orden de bytes incorrecto, lo que result\u00f3 en una configuraci\u00f3n de nftables que no funciona seg\u00fan lo previsto (podr\u00eda bloquear o no las direcciones deseadas). Este problema afecta a: https://pkg.go.dev/github.com/google/[email protected] El error se solucion\u00f3 en la siguiente versi\u00f3n lanzada: https://pkg.go.dev/github.com/google /[email protected]"}], "lastModified": "2025-09-26T17:02:17.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:nftables:0.1.0:*:*:*:*:go:*:*", "vulnerable": true, "matchCriteriaId": "6A47E20C-B852-476E-8DD0-EC9BA887E8B2"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}