Riskcovery

CVE-2024-6284

Improper IPv4 and IPv6 byte order storage in github.com/google/nftables

State
Published
Severity
6.3 Medium
Published
Jul 3, 2024
Updated
Sep 8, 2025
Reserved
Jun 24, 2024

Read the record on cve.org

Description

In https://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).

This issue affects:  https://pkg.go.dev/github.com/google/nftables@v0.1.0

The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/nftables@v0.2.0

Scores

CVSSScoreVectorSource
4.06.3 MediumCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:LGoogle

Weaknesses

  • CWE-1286 Improper Validation of Syntactic Correctness of Input
  • CWE-1389 Incorrect Parsing of Numbers with Different Radices

Affected Products

ProductVersions
https://github.com/google/nftablesGoogle
  • 0.1.0Affected
  • 0.2.0Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.