@@ -2602,7 +2602,7 @@ var testCases = []testCase{
2602
2602
},
2603
2603
},
2604
2604
AddedBy : "sha256:596ba82af5aaa3e2fd9d6f955b8b94f0744a2b60710e3c243ba3e4a467f051d1" ,
2605
- FixedBy : "1.32.1-r8 " ,
2605
+ FixedBy : "1.32.1-r9 " ,
2606
2606
Executables : []* v1.Executable {
2607
2607
{
2608
2608
Path : "/etc/network/if-up.d/dad" ,
@@ -2721,7 +2721,34 @@ var testCases = []testCase{
2721
2721
NamespaceName : "alpine:v3.16" ,
2722
2722
VersionFormat : "apk" ,
2723
2723
Version : "1.35.0-r13" ,
2724
- AddedBy : "sha256:2408cc74d12b6cd092bb8b516ba7d5e290f485d3eb9672efc00f0583730179e8" ,
2724
+ Vulnerabilities : []apiV1.Vulnerability {
2725
+ {
2726
+ Name : "CVE-2022-30065" ,
2727
+ NamespaceName : "alpine:v3.16" ,
2728
+ Description : "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function." ,
2729
+ Link : "https://www.cve.org/CVERecord?id=CVE-2022-30065" ,
2730
+ Severity : "Important" ,
2731
+ Metadata : map [string ]interface {}{
2732
+ "NVD" : map [string ]interface {}{
2733
+ "CVSSv3" : map [string ]interface {}{
2734
+ "ExploitabilityScore" : 1.8 ,
2735
+ "ImpactScore" : 5.9 ,
2736
+ "Score" : 7.8 ,
2737
+ "Vectors" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
2738
+ },
2739
+ "CVSSv2" : map [string ]interface {}{
2740
+ "ExploitabilityScore" : 8.6 ,
2741
+ "ImpactScore" : 6.4 ,
2742
+ "Score" : 6.8 ,
2743
+ "Vectors" : "AV:N/AC:M/Au:N/C:P/I:P/A:P" ,
2744
+ },
2745
+ },
2746
+ },
2747
+ FixedBy : "1.35.0-r15" ,
2748
+ },
2749
+ },
2750
+ AddedBy : "sha256:2408cc74d12b6cd092bb8b516ba7d5e290f485d3eb9672efc00f0583730179e8" ,
2751
+ FixedBy : "1.35.0-r15" ,
2725
2752
},
2726
2753
},
2727
2754
},
@@ -2876,9 +2903,9 @@ var testCases = []testCase{
2876
2903
},
2877
2904
"CVSSv2" : map [string ]interface {}{
2878
2905
"ExploitabilityScore" : 6.8 ,
2879
- "ImpactScore" : 6.4 ,
2880
- "Score" : 6.0 ,
2881
- "Vectors" : "AV:N/AC:M/Au:S/C:P /I:P /A:P " ,
2906
+ "ImpactScore" : 10.0 ,
2907
+ "Score" : 8.5 ,
2908
+ "Vectors" : "AV:N/AC:M/Au:S/C:C /I:C /A:C " ,
2882
2909
},
2883
2910
},
2884
2911
},
@@ -2978,9 +3005,9 @@ var testCases = []testCase{
2978
3005
},
2979
3006
"CVSSv2" : map [string ]interface {}{
2980
3007
"ExploitabilityScore" : 6.8 ,
2981
- "ImpactScore" : 6.4 ,
2982
- "Score" : 6.0 ,
2983
- "Vectors" : "AV:N/AC:M/Au:S/C:P /I:P /A:P " ,
3008
+ "ImpactScore" : 10.0 ,
3009
+ "Score" : 8.5 ,
3010
+ "Vectors" : "AV:N/AC:M/Au:S/C:C /I:C /A:C " ,
2984
3011
},
2985
3012
},
2986
3013
},
@@ -3090,9 +3117,9 @@ var testCases = []testCase{
3090
3117
},
3091
3118
"CVSSv2" : map [string ]interface {}{
3092
3119
"ExploitabilityScore" : 6.8 ,
3093
- "ImpactScore" : 6.4 ,
3094
- "Score" : 6.0 ,
3095
- "Vectors" : "AV:N/AC:M/Au:S/C:P /I:P /A:P " ,
3120
+ "ImpactScore" : 10.0 ,
3121
+ "Score" : 8.5 ,
3122
+ "Vectors" : "AV:N/AC:M/Au:S/C:C /I:C /A:C " ,
3096
3123
},
3097
3124
},
3098
3125
},
0 commit comments