Comments (1)
I haven't had the time to look properly where the variables are used (and I could be out of my depth), but could it have something to do with the way the variables are assigned. There are both a short and full version of the variables in the parseUname function.
1866: KERNEL=$(echo "$uname" | awk '{print $3}' | cut -d '-' -f 1)
1867: KERNEL_ALL=$(echo "$uname" | awk '{print $3}')
If its using $KERNEL, the regex would bypass the minor versions and provide false positives.
Linux ubuntu 5.15.0-70-generic #80~20.04.1-Ubuntu SMP Wed May 17 14:58:14 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Linux ubuntu 5.15.0-73-generic #80~20.04.1-Ubuntu SMP Wed May 17 14:58:14 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
$KERNEL for the uname's above would both be 5.15.0
If $KERNEL_ALL is used then i agree that the regex would only match 5.15.0- from 5.15.0-73-generic
It may well be barking up the wrong tree but it could be worth looking into if your up to date VM still comes back as highly probably. Hopefully its a helpful suggestion, if not - apologies! (:
P.S. Big fan
from linux-exploit-suggester.
Related Issues (20)
- My OS is up to date, why I still get the CVE exposure report? HOT 4
- Please update the script
- [CVE-2017-16995] Incorrect kernel version check HOT 2
- Software That May Be of Use
- [Suggestion] Alternative exploit for CVE-2017-1000112 HOT 1
- [Suggestion] Alternative exploit for CVE-2017-7308 HOT 1
- CONFIG_CC_STACKPROTECTOR deprecated in kernel 4.16 HOT 1
- Incorrect details for double-fdput (CVE-2016-4557) HOT 1
- Package version detection HOT 2
- bash compatibility HOT 2
- cannot create temp file for here-document: No such file or directory HOT 6
- Inventory notification HOT 1
- cat: write error: Broken pipe
- Aborts with `Both 'src-url' and 'exploit-db' entries are empty for '\e[1;32m[CVE-2019-15666]\e[0m XFRM_UAF' exploit - fix that. Aborting.` HOT 4
- Exploit Dirty cow 2 has been moved permanently. HOT 1
- Allow JSON output for automation integration
- Baron Samedit is displayed for invalid GLIBC versions HOT 2
- Typo: memodipper instead of mempodipper HOT 2
- Please Help Me HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from linux-exploit-suggester.