empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 17:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add CVE-2013-0340 to ignore list (#13942)

Browse Source
This commit is contained in:
Tim Lee 2023-09-15 16:38:33 -06:00 committed by GitHub
parent d38159efd6
commit 0bde133831
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
changes/11926-python-vuln-false-positive Normal file
View File

@ -0,0 +1 @@
- CVE-2013-0340 no longer reports as a valid vulnerability due to NVD recommendations

6
server/vulnerabilities/nvd/cpe_matching_rule_test.go
View File

@ -255,4 +255,10 @@ func TestGetKnownNVDBugRules(t *testing.T) {
require.True(t, ok)
ok = rule.CPEMatches(cpeMeta)
require.False(t, ok)
// Test that CVE-2013-0340 never matches (i.e. is ignored).
rule, ok = cpeMatchingRules.FindMatch("CVE-2013-0340")
require.True(t, ok)
ok = rule.CPEMatches(cpeMeta)
require.False(t, ok)
}

7
server/vulnerabilities/nvd/cpe_matching_rules.go
View File

@ -140,6 +140,13 @@ func GetKnownNVDBugRules() (CPEMatchingRules, error) {
"CVE-2020-10146": {},
},
},
// #9835 Python expat 2.1.0 CVE recommends rejecting the report, no CVSS score, broad CPE criteria
CPEMatchingRule{
IgnoreAll: true,
CVEs: map[string]struct{}{
"CVE-2013-0340": {},
},
},
}
for i, rule := range rules {