PT-2024-37512 · Google · Nftables

Bughunter2 · Published 2024-07-03 · Updated 2025-09-08 · CVE-2024-6284

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: github.com/google/nftables version 0.1.0

Description: The issue arises from IP addresses being encoded in the wrong byte order, resulting in an nftables configuration that does not work as intended. This could lead to either blocking or not blocking the desired addresses.

Recommendations: For github.com/google/nftables version 0.1.0, update to version 0.2.0 to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1389

CWE-1286

CWE-20

Related Identifiers

CVE-2024-6284

GHSA-QJVF-8748-9W7H

GO-2024-2977

Affected Products

Nftables

References · 19

• 🔥 https://github.com/google/nftables/issues/225 · Exploit
• 🔥 https://github.com/crowdsecurity/cs-firewall-bouncer/issues/368 · Exploit
• https://cve.org/CVERecord?id=CVE-2024-6284 · Security Note
• https://ubuntu.com/security/CVE-2024-6284 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-6284 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qjvf-8748-9w7h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6284 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-6284 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-6284 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2024-2977 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-6284 · Vendor Advisory
• https://github.com/google/nftables/commit/d746ecb0e494e7200180c3886fde9664d9100729 · Note
• https://github.com/google/nftables · Note
• https://github.com/google/nftables/commit/b1f901b05510bed05c232c5049f68d1511b56a19 · Note
• https://bugs.launchpad.net/ubuntu/+source/crowdsec-firewall-bouncer/+bug/2069596 · Note