Debian: CVE-2024-6284: golang-github-google-nftables -- security update

Debian: CVE-2024-6284: golang-github-google-nftables -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/30/2024

Created

07/31/2024

Added

07/30/2024

Modified

07/31/2024

Description

Inhttps://github.com/google/nftables  IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects:  https://pkg.go.dev/github.com/google/[email protected] The bug was fixed in the next released version:  https://pkg.go.dev/github.com/google/[email protected]

Solution(s)

• debian-upgrade-golang-github-google-nftables

References

• https://attackerkb.com/topics/cve-2024-6284
• CVE - 2024-6284