CVE-2024-6284
Publication date 3 July 2024
Last updated 24 July 2024
Ubuntu priority
In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables configuration which does not work as intended (might block or not block the desired addresses). This issue affects: https://pkg.go.dev/github.com/google/nftables@v0.1.0 The bug was fixed in the next released version: https://pkg.go.dev/github.com/google/nftables@v0.2.0
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| golang-github-google-nftables | 24.10 oracular |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release |
Notes
alexmurray
crowsec-firewall-bouncer needs a no-change rebuild once golang-github-google-nftables is patched to ensure it is also patched since it is Built-Using