Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix for Spurious linux_kernel CVEs, cpe string handling #1086

Merged
merged 1 commit into from
Mar 12, 2024
Merged

fix for Spurious linux_kernel CVEs, cpe string handling #1086

merged 1 commit into from
Mar 12, 2024

Conversation

m-1-k-3
Copy link
Member

@m-1-k-3 m-1-k-3 commented Mar 8, 2024

  • What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

Bug fix

  • What is the current behavior? (You can also link to an open issue here)

see #1080

  • What is the new behavior (if this is a feature change)? If possible add a screenshot.

closes #1080

@m-1-k-3
Copy link
Member Author

m-1-k-3 commented Mar 8, 2024

@gluesmith2021 could you give it a try

@m-1-k-3 m-1-k-3 added bug Something isn't working cve-search Some cve-search question/issue EMBA labels Mar 8, 2024
@m-1-k-3 m-1-k-3 changed the title dirty fix fix for Spurious linux_kernel CVEs, cpe string handling Mar 8, 2024
@gluesmith2021
Copy link

gluesmith2021 commented Mar 11, 2024 •
edited
Loading

@gluesmith2021 could you give it a try

Fix works perfectly. Diff between CVE results from before-fix and after-fix on my sample also reveals that other software was affected, i.e. not only linux_kernel as is the original issue. For example, "lua:5.1.2" would incorrectly match those two CVEs for the same reason:

The fix prevents such incorrect matches. Thank you.

@BenediktMKuehne BenediktMKuehne merged commit dd84dfe into e-m-b-a:master Mar 12, 2024
14 checks passed
@m-1-k-3 m-1-k-3 deleted the Spurious_linux_kernel_CVEs_cpe_string_handling branch February 13, 2025 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@BenediktMKuehne BenediktMKuehne BenediktMKuehne approved these changes

Assignees

@BenediktMKuehne BenediktMKuehne

Labels
bug Something isn't working cve-search Some cve-search question/issue EMBA
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Spurious linux_kernel CVEs, cpe string handling.
3 participants
@m-1-k-3 @gluesmith2021 @BenediktMKuehne