CVE-2024-6284

In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596	Issue Tracking
https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368	Exploit Issue Tracking
https://github.com/google/nftables/issues/225	Exploit Issue Tracking
https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596	Issue Tracking
https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368	Exploit Issue Tracking
https://github.com/google/nftables/issues/225	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:nftables:0.1.0:*:*:*:*:go:*:*

History

22 Jul 2025, 18:45

Type	Values Removed	Values Added
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:a:google:nftables:0.1.0:::::go::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.3
First Time		Google nftables Google
References	~~() https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 -~~	() https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 - Issue Tracking
References	~~() https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 -~~	() https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 - Exploit, Issue Tracking
References	~~() https://github.com/google/nftables/issues/225 -~~	() https://github.com/google/nftables/issues/225 - Exploit, Issue Tracking

Information

Published : 2024-07-03 23:15

Updated : 2025-07-22 18:45

NVD link : CVE-2024-6284

Mitre link : CVE-2024-6284

CVE.ORG link : CVE-2024-6284

JSON object : View

Products Affected

google

nftables

CWE

CWE-20

Improper Input Validation

NVD-CWE-noinfo

{"id": "CVE-2024-6284", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "cve-coordination@google.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2024-07-03T23:15:02.333", "references": [{"url": "https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596", "tags": ["Issue Tracking"], "source": "cve-coordination@google.com"}, {"url": "https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368", "tags": ["Exploit", "Issue Tracking"], "source": "cve-coordination@google.com"}, {"url": "https://github.com/google/nftables/issues/225", "tags": ["Exploit", "Issue Tracking"], "source": "cve-coordination@google.com"}, {"url": "https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596", "tags": ["Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368", "tags": ["Exploit", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/google/nftables/issues/225", "tags": ["Exploit", "Issue Tracking"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cve-coordination@google.com", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In https://github.com/google/nftables \u00a0IP addresses were encoded in the wrong byte order,\u00a0resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses).\n\nThis issue affects:\u00a0 https://pkg.go.dev/github.com/google/nftables@v0.1.0 \n\nThe bug was fixed in the next released version:\u00a0 https://pkg.go.dev/github.com/google/nftables@v0.2.0"}, {"lang": "es", "value": "En https://github.com/google/nftables, las direcciones IP se codificaron en el orden de bytes incorrecto, lo que result\u00f3 en una configuraci\u00f3n de nftables que no funciona seg\u00fan lo previsto (podr\u00eda bloquear o no las direcciones deseadas). Este problema afecta a: https://pkg.go.dev/github.com/google/nftables@v0.1.0 El error se solucion\u00f3 en la siguiente versi\u00f3n lanzada: https://pkg.go.dev/github.com/google /nftables@v0.2.0"}], "lastModified": "2025-07-22T18:45:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:nftables:0.1.0:*:*:*:*:go:*:*", "vulnerable": true, "matchCriteriaId": "6A47E20C-B852-476E-8DD0-EC9BA887E8B2"}], "operator": "OR"}]}], "sourceIdentifier": "cve-coordination@google.com"}