Vulnerability Report: GO-2024-2977
- CVE-2024-6284, GHSA-qjvf-8748-9w7h
- Affects: github.com/google/nftables
- Published: Jul 09, 2024
IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which did not work as intended (might block or not block the desired addresses).
For detailed information about this vulnerability, visit https://github.com/advisories/GHSA-qjvf-8748-9w7h.
Affected Packages
-
PathGo VersionsSymbols
-
from v0.1.0 before v0.2.0
Aliases
References
- https://github.com/advisories/GHSA-qjvf-8748-9w7h
- https://github.com/google/nftables/commit/b1f901b05510bed05c232c5049f68d1511b56a19
- https://github.com/google/nftables/issues/225
- https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596
- https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368
- https://vuln.go.dev/ID/GO-2024-2977.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.