CVE-2024-6284
Published: 3 July 2024
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0
Notes
| Author | Note |
|---|---|
| alexmurray |
crowsec-firewall-bouncer needs a no-change rebuild once golang-github-google-nftables is patched to ensure it is also patched since it is Built-Using |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
golang-github-google-nftables
Launchpad, Ubuntu, Debian |
focal |
Does not exist
|
| jammy |
Does not exist
|
|
| mantic |
Ignored
(end of life, was needs-triage)
|
|
| noble |
Needs triage
|
|
| upstream |
Needs triage
|