Merge pull request #65 from exploide/cve-false-positives - Commit bf6f985a - STRLCPY/linux-smart-enumeration

Merge pull request #65 from exploide/cve-false-positives
```
CVE false positives fix
```
Diego Blanco committed with GitHub 2 years ago

bf6f985a

2 parents
9e07dbe0
91499b52

Revision indexing in progress... (symbol navigation in revisions will be accurate after indexed)

Total 3 files Show one by one

cve/cve-2021-3156.sh | 100644 /~icons-ver-BEF942F0F42935333EFA072090F4E956.svg#arrow3 100755

Content is identical

■ ■ ■ ■ ■ ■

cve/cve-2021-4034.sh

		skipped 116 lines
117	117		35)
118	118		package_fixed="0.120-1.fc35.1"
119	119		;;
	120	+	36)
	121	+	package_fixed="0.120-3.fc36"
	122	+	;;
	123	+	*)
	124	+	[ $((distro_release)) -gt 36 ] && exit 1
	125	+	;;
120	126		esac
121	127		;;
122	128		#TODO: Add RedHat and other distros, although their info about patches is very poor
		skipped 12 lines

■ ■ ■ ■ ■ ■

cve/cve-2022-0847.sh

		skipped 50 lines
51	51		v3=$(echo "$kernel" \| cut -d '.' -f3)
52	52		v1=${v1:-0};v2=${v2:-0};v3=${v3:-0};
53	53
54		-	if [ "$v1" = 5 ]; then
55		-	if [ $((v2)) -lt 8 ] \|\|
56		-	{ [ "$v2" = 10 ] && [ $((v3)) -ge 102 ]; } \|\|
57		-	{ [ "$v2" = 15 ] && [ $((v3)) -ge 25 ]; } \|\|
58		-	{ [ "$v2" = 16 ] && [ $((v3)) -ge 11 ]; } \|\|
59		-	[ $((v2)) -gt 16 ]
60		-	then
61		-	# Not vulnerable
62		-	exit 1
63		-	fi
	54	+	if [ "$v1" != 5 ] \|\|
	55	+	[ $((v2)) -lt 8 ] \|\|
	56	+	{ [ "$v2" = 10 ] && [ $((v3)) -ge 102 ]; } \|\|
	57	+	{ [ "$v2" = 15 ] && [ $((v3)) -ge 25 ]; } \|\|
	58	+	{ [ "$v2" = 16 ] && [ $((v3)) -ge 11 ]; } \|\|
	59	+	[ $((v2)) -gt 16 ]
	60	+	then
	61	+	# Not vulnerable
	62	+	exit 1
64	63		fi
65	64
66	65		case "$lse_distro_codename" in
		skipped 23 lines

Please wait...

Page is in error, reload to recover