STRLCPY/linux-smart-enumeration

Merge pull request #68 from exploide/cve-2021-3156-amzn
```
cve-2021-3156: fixed false positives on Amazon Linux
```
Diego Blanco committed with GitHub 2 years ago

51a3a689

2 parents
105e9b7e
a5af30a8

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

■ ■ ■ ■ ■ ■

cve/cve-2021-3156.sh

		skipped 90 lines
91	91		;;
92	92		esac
93	93		;;
	94	+	amzn)
	95	+	[ -r "/etc/os-release" ] && distro_release=$(grep -E '^VERSION_ID=' /etc/os-release \| cut -f2 -d= \| tr -d '"')
	96	+	case "$distro_release" in
	97	+	1)
	98	+	package_fixed="1.8.23-9.56.amzn1"
	99	+	;;
	100	+	2)
	101	+	package_fixed="1.8.23-4.amzn2.2.1"
	102	+	;;
	103	+	esac
	104	+	;;
94	105		esac
95	106		if [ -n "$package_fixed" ] && [ -n "$package_version" ] && ! lse_is_version_bigger "$package_fixed" "$package_version"; then
96	107		exit 1
		skipped 2 lines
99	110		$vulnerable && echo "Vulnerable! sudo version: $sudo_version"
100	111		} #)
101	112
	113	+	# Uncomment this line for testing the lse_cve_test function
	114	+	#lse_NO_EXEC=true . ../lse.sh ; lse_cve_test
	115	+

■ ■ ■ ■ ■ ■

lse.sh

		skipped 624 lines
625	625		debian\|ubuntu)
626	626		pkg_version=`dpkg -l "$pkg_name" 2>/dev/null \| grep -E '^ii' \| tr -s ' ' \| cut -d' ' -f3`
627	627		;;
628		-	centos\|redhat\|fedora\|opsuse\|rocky)
	628	+	centos\|redhat\|fedora\|opsuse\|rocky\|amzn)
629	629		pkg_version=`rpm -q "$pkg_name" 2>/dev/null`
630	630		pkg_version="${pkg_version##$pkg_name-}"
631	631		pkg_version=`echo "$pkg_version" \| sed -E 's/\.(aarch64\|armv7hl\|i686\|noarch\|ppc64le\|s390x\|x86_64)$//'`
		skipped 915 lines