Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(ubuntu): add ubuntu 23.04 #1647

Merged
merged 1 commit into from
Apr 26, 2023
Merged

feat(ubuntu): add ubuntu 23.04 #1647

merged 1 commit into from
Apr 26, 2023

Conversation

MaineK00n
Copy link
Collaborator

@MaineK00n MaineK00n commented Apr 19, 2023 •
edited
Loading

What did you implement:

add ubuntu 23.04

Type of change

  • New feature (non-breaking change which adds functionality)
  • This change requires a documentation update

How Has This Been Tested?

$ vuls scan
[Apr 26 23:32:10]  INFO [localhost] vuls-v0.23.1-build-20230426_233117_9c1081c
[Apr 26 23:32:10]  INFO [localhost] Start scanning
[Apr 26 23:32:10]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Apr 26 23:32:10]  INFO [localhost] Validating config...
[Apr 26 23:32:10]  INFO [localhost] Detecting Server/Container OS... 
[Apr 26 23:32:10]  INFO [localhost] Detecting OS of servers... 
[Apr 26 23:32:10]  INFO [localhost] (1/1) Detected: docker: ubuntu 23.04
[Apr 26 23:32:10]  INFO [localhost] Detecting OS of containers... 
[Apr 26 23:32:10]  INFO [localhost] Checking Scan Modes... 
[Apr 26 23:32:10]  INFO [localhost] Detecting Platforms... 
[Apr 26 23:32:12]  INFO [localhost] (1/1) docker is running on other
[Apr 26 23:32:12]  INFO [docker] Scanning OS pkg in fast mode


Scan Summary
================
docker	ubuntu23.04	328 installed





To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ vuls report
[Apr 26 23:32:18]  INFO [localhost] vuls-v0.23.1-build-20230426_233117_9c1081c
[Apr 26 23:32:18]  INFO [localhost] Validating config...
[Apr 26 23:32:18]  INFO [localhost] cveDict.type=sqlite3, cveDict.url=, cveDict.SQLite3Path=/usr/share/vuls-data/cve.sqlite3
[Apr 26 23:32:18]  INFO [localhost] ovalDict.type=sqlite3, ovalDict.url=, ovalDict.SQLite3Path=/usr/share/vuls-data/oval.sqlite3
[Apr 26 23:32:18]  INFO [localhost] gost.type=sqlite3, gost.url=, gost.SQLite3Path=/usr/share/vuls-data/gost.sqlite3
[Apr 26 23:32:18]  INFO [localhost] exploit.type=sqlite3, exploit.url=, exploit.SQLite3Path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Apr 26 23:32:18]  INFO [localhost] metasploit.type=sqlite3, metasploit.url=, metasploit.SQLite3Path=/usr/share/vuls-data/go-msfdb.sqlite3
[Apr 26 23:32:18]  INFO [localhost] kevuln.type=sqlite3, kevuln.url=, kevuln.SQLite3Path=/usr/share/vuls-data/go-kev.sqlite3
[Apr 26 23:32:18]  INFO [localhost] cti.type=sqlite3, cti.url=, cti.SQLite3Path=/usr/share/vuls-data/go-cti.sqlite3
[Apr 26 23:32:18]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2023-04-26T23-32-12+0900
[Apr 26 23:32:18]  INFO [localhost] Skip OVAL and Scan with gost alone.
[Apr 26 23:32:18]  INFO [localhost] docker: 0 CVEs are detected with OVAL
[Apr 26 23:32:19]  INFO [localhost] docker: 61 CVEs are detected with gost
[Apr 26 23:32:19]  INFO [localhost] docker: 0 CVEs are detected with CPE
[Apr 26 23:32:19]  INFO [localhost] docker: 0 PoC are detected
[Apr 26 23:32:19]  INFO [localhost] docker: 0 exploits are detected
[Apr 26 23:32:19]  INFO [localhost] docker: Known Exploited Vulnerabilities are detected for 0 CVEs
[Apr 26 23:32:19]  INFO [localhost] docker: Cyber Threat Intelligences are detected for 11 CVEs
[Apr 26 23:32:19]  INFO [localhost] docker: total 61 CVEs detected
[Apr 26 23:32:19]  INFO [localhost] docker: 0 CVEs filtered by --confidence-over=80
docker (ubuntu23.04)
====================
Total: 61 (Critical:1 High:5 Medium:40 Low:15 ?:0)
3/61 Fixed, 6 poc, 0 exploits, cisa: 0, uscert: 0, jpcert: 0 alerts
328 installed

+------------------+------+--------+-----+-----------+---------+--------------------------------+
|      CVE-ID      | CVSS | ATTACK | POC |   ALERT   |  FIXED  |            PACKAGES            |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2016-1585    |  9.8 |  AV:N  |     |           | unfixed | libapparmor1                   |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2020-16156   |  7.8 |  AV:N  | POC |           | unfixed | libperl5.36, perl, perl-base,  |
|                  |      |        |     |           |         | perl-modules-5.36              |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2016-20013   |  7.5 |  AV:N  | POC |           | unfixed | libc-bin, libc-dev-bin,        |
|                  |      |        |     |           |         | libc-devtools, libc6,          |
|                  |      |        |     |           |         | libc6-dev                      |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2018-20657   |  7.5 |  AV:N  | POC |           | unfixed | binutils, binutils-common,     |
|                  |      |        |     |           |         | binutils-x86-64-linux-gnu,     |
|                  |      |        |     |           |         | libbinutils, libctf-nobfd0,    |
|                  |      |        |     |           |         | libctf0, libgprofng0           |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2018-6952    |  7.5 |  AV:N  |     |           | unfixed | patch                          |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2021-3530    |  7.5 |  AV:N  |     |           | unfixed | binutils, binutils-common,     |
|                  |      |        |     |           |         | binutils-x86-64-linux-gnu,     |
|                  |      |        |     |           |         | libbinutils, libctf-nobfd0,    |
|                  |      |        |     |           |         | libctf0, libgprofng0           |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2020-13844   |  6.9 |  AV:L  |     |           | unfixed | cpp, g++, gcc                  |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2021-31879   |  6.9 |  AV:N  |     |           | unfixed | wget                           |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-2519    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-2520    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-2521    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3570    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3597    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3598    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3599    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3626    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3627    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-42010   |  6.9 |        |     |           | unfixed | dbus, dbus-bin, dbus-daemon,   |
|                  |      |        |     |           |         | dbus-session-bus-common,       |
|                  |      |        |     |           |         | dbus-system-bus-common,        |
|                  |      |        |     |           |         | dbus-user-session, libdbus-1-3 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-42011   |  6.9 |        |     |           | unfixed | dbus, dbus-bin, dbus-daemon,   |
|                  |      |        |     |           |         | dbus-session-bus-common,       |
|                  |      |        |     |           |         | dbus-system-bus-common,        |
|                  |      |        |     |           |         | dbus-user-session, libdbus-1-3 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-42012   |  6.9 |        |     |           | unfixed | dbus, dbus-bin, dbus-daemon,   |
|                  |      |        |     |           |         | dbus-session-bus-common,       |
|                  |      |        |     |           |         | dbus-system-bus-common,        |
|                  |      |        |     |           |         | dbus-user-session, libdbus-1-3 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-44617   |  6.9 |        |     |           | unfixed | libxpm4                        |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-46285   |  6.9 |        |     |           | unfixed | libxpm4                        |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-47629   |  6.9 |        |     |           | unfixed | libksba8                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-48281   |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-4883    |  6.9 |        |     |           | unfixed | libxpm4                        |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0795    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0796    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0797    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0798    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0799    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0800    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0801    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0802    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0803    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0804    |  6.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-2004    |  6.9 |        |     |           | unfixed | libfreetype6                   |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27043   |  6.9 |        |     |           | unfixed | libpython3.11-minimal,         |
|                  |      |        |     |           |         | libpython3.11-stdlib,          |
|                  |      |        |     |           |         | python3.11, python3.11-minimal |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27535   |  6.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2016-2781    |  6.5 |  AV:L  |     |           | unfixed | coreutils                      |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2017-9937    |  6.5 |  AV:N  | POC |           | unfixed | libjbig0                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2018-10126   |  6.5 |  AV:N  | POC |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2021-40812   |  6.5 |  AV:N  |     |           | unfixed | libgd3                         |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2020-14145   |  5.9 |  AV:N  |     |           | unfixed | openssh-client,                |
|                  |      |        |     |           |         | openssh-server,                |
|                  |      |        |     |           |         | openssh-sftp-server            |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2017-13716   |  5.5 |  AV:N  |     |           | unfixed | binutils, binutils-common,     |
|                  |      |        |     |           |         | binutils-x86-64-linux-gnu,     |
|                  |      |        |     |           |         | libbinutils, libctf-nobfd0,    |
|                  |      |        |     |           |         | libctf0, libgprofng0           |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2019-1010204 |  5.5 |  AV:N  |     |           | unfixed | binutils, binutils-common,     |
|                  |      |        |     |           |         | binutils-x86-64-linux-gnu,     |
|                  |      |        |     |           |         | libbinutils, libctf-nobfd0,    |
|                  |      |        |     |           |         | libctf0, libgprofng0           |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2021-45261   |  5.5 |  AV:N  | POC |           | unfixed | patch                          |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-2309    |  3.9 |        |     |           | unfixed | libxml2                        |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-2953    |  3.9 |        |     |           | unfixed | libtiff6                       |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3219    |  3.9 |        |     |           | unfixed | dirmngr, gnupg, gnupg-l10n,    |
|                  |      |        |     |           |         | gnupg-utils, gpg,              |
|                  |      |        |     |           |         | gpg-agent, gpg-wks-client,     |
|                  |      |        |     |           |         | gpg-wks-server, gpgconf,       |
|                  |      |        |     |           |         | gpgsm, gpgv                    |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2022-3857    |  3.9 |        |     |           | unfixed | libpng16-16                    |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0464    |  3.9 |        |     |           |   fixed | libssl3, openssl               |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0465    |  3.9 |        |     |           |   fixed | libssl3, openssl               |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-0466    |  3.9 |        |     |           |   fixed | libssl3, openssl               |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-1255    |  3.9 |        |     |           | unfixed | libssl3, openssl               |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27533   |  3.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27534   |  3.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27536   |  3.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27537   |  3.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-27538   |  3.9 |        |     |           | unfixed | curl, libcurl4                 |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-28531   |  3.9 |        |     |           | unfixed | openssh-client,                |
|                  |      |        |     |           |         | openssh-server,                |
|                  |      |        |     |           |         | openssh-sftp-server            |
+------------------+------+--------+-----+-----------+---------+--------------------------------+
| CVE-2023-29383   |  3.9 |        |     |           | unfixed | login, passwd                  |
+------------------+------+--------+-----+-----------+---------+--------------------------------+

Checklist:

You don't have to satisfy all of the following.

  • Write tests
  • Write documentation
  • Check that there aren't other open pull requests for the same issue/feature
  • Format your source code by make fmt
  • Pass the test by make test
  • Provide verification config / commands
  • Enable "Allow edits from maintainers" for this PR
  • Update the messages below

Is this ready for review?: NO

Reference

@MaineK00n MaineK00n self-assigned this Apr 19, 2023
@MaineK00n MaineK00n mentioned this pull request Apr 19, 2023
Merged
@MaineK00n MaineK00n force-pushed the MaineK00n/ubuntu-23.04 branch 2 times, most recently from dda632e to d54a7fc Compare April 20, 2023 05:14
@MaineK00n MaineK00n marked this pull request as ready for review April 26, 2023 14:34
@MaineK00n MaineK00n force-pushed the MaineK00n/ubuntu-23.04 branch from d54a7fc to 9c1081c Compare April 26, 2023 14:35
@MaineK00n MaineK00n requested a review from kotakanbe April 26, 2023 14:49
@MaineK00n MaineK00n merged commit 6787ab4 into master Apr 26, 2023
@MaineK00n MaineK00n deleted the MaineK00n/ubuntu-23.04 branch April 26, 2023 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kotakanbe kotakanbe Awaiting requested review from kotakanbe

Assignees

@MaineK00n MaineK00n

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@MaineK00n