Comments (7)
'With something like #256, we could locally periodically re-run the same vulnerable configuration list building routine as on mogo CVE document creation time on the existing documents, without re-downloading the complete NIST database.' This would be something interesting to actually add to the current code base; @Tazmaniac is that something you would like to share?
Yes, we hope so. We could propose something.
from cvexplore.
One side note:
CPE database is incomplete (known thing) and lag a lot and even more behind CVEs actually too.
(https://nvd.nist.gov/general/news/nvd-program-transition-announcement)
As #256 is not merged, when CPE concerning an already published CVE is published (CVE with or without configuration range) you need to reset and re-import the complete NIST CVE database.
With something like #256, we could locally periodically re-run the same vulnerable configuration list building routine as on mogo CVE document creation time on the existing documents, without re-downloading the complete NIST database.
We could even add a new parameter for new slow requests that do it on the fly for CVEs, or new route (cvesearch) to do more advanced query like explained in #238 or others like "is the CPE is in a configuration range of a CVE" even if the CPE is not in the database.
This later one could be a reason to later remove the "populate vulnerable_configuration with the CPE part of the CVE criteria if the CPE stem is not in the CPE database or empty).
#268 was found with Maxime when investigating on the present issue/regression.
from cvexplore.
Sorry Guys; #256 fell completely off my radar for some reason; will merge asap!
from cvexplore.
#256 is merged; but to my understanding this does not solve this issue, does it?
from cvexplore.
'With something like #256, we could locally periodically re-run the same vulnerable configuration list building routine as on mogo CVE document creation time on the existing documents, without re-downloading the complete NIST database.' This would be something interesting to actually add to the current code base; @Tazmaniac is that something you would like to share?
from cvexplore.
#256 is merged; but to my understanding this does not solve this issue, does it?
No it does not solve it but permit to mitigate the impact with a tool to rebuild the vulnerable_configuration without re-downloading the NIST database (for the case there is CPE updates).
from cvexplore.
related to #284
from cvexplore.
Related Issues (20)
- Make Sem-factor configurable and add random sleep time between requests
- Bug in bulk write mongodb HOT 8
- Logging to update_populate log stops when downloading cves
- Bug with OpenSSL versions HOT 5
- Database Updates fail when filtering out Deprecated CPEs HOT 4
- alembic check should not take place if datasource_type != "mysql"
- TypeError: unsupported operand type(s) for |: 'type' and 'type' HOT 3
- CPEs with ':' in the product or vendor are parsed incorrectly HOT 2
- Avoid full file downloads in sources_process HOT 3
- Fix for #268 HOT 3
- Create possibility to populate a single entry (cpe or cve) for testing purposes HOT 3
- Update database model
- Background celery runners HOT 2
- Create cli functions for task creation, status checks etc
- Update package documentation HOT 1
- Celery Backend tasks should be documented and installation procedure for docker and systemd described HOT 1
- Create tasks for auto update
- Create tasks for reprocessing cve's on cpe update
- Create database schema documentation HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cvexplore.