Page History

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

...

Release 5: Akraino CVE Vulnerability Exception Request

CVE-ID	CVSS	NVD	Fix/Notes
CVE-2016-1585	9.8	https://nvd.nist.gov/vuln/detail/CVE-2016-1585
CVE-2021-20223	9.8	https://nvd.nist.gov/vuln/detail/CVE-2021-20223
CVE-2022-0318	9.8	https://nvd.nist.gov/vuln/detail/CVE-2022-0318
CVE-2022-1927	9.8	https://nvd.nist.gov/vuln/detail/CVE-2022-1927
CVE-2022-37434	9.8	https://nvd.nist.gov/vuln/detail/CVE-2022-37434
CVE-2022-1012	9.1	https://nvd.nist.gov/vuln/detail/CVE-2022-1012
CVE-2022-1586	9.1	https://nvd.nist.gov/vuln/detail/CVE-2022-1586
CVE-2022-1587	9.1	https://nvd.nist.gov/vuln/detail/CVE-2022-1587

CVE-IDCVSSNVDFix/NotesCVE-2016-15859.8https://nvd.nist.gov/vuln/detail/CVE-2016-1585No fix availableCVE-2021-202369.8https://nvd.nist.gov/vuln/detail/CVE-2021-20236No fix available (latest release of ZeroMQ for Ubuntu 20.04 is 4.3.2-2ubuntu1)CVE-2021-318709.8https://nvd.nist.gov/vuln/detail/CVE-2021-31870No fix available (latest release of klibc for Ubuntu 20.04 is 2.0.7-1ubuntu5)CVE-2021-318729.8https://nvd.nist.gov/vuln/detail/CVE-2021-31872No fix available (latest release of klibc for Ubuntu 20.04 is 2.0.7-1ubuntu5)CVE-2021-318739.8https://nvd.nist.gov/vuln/detail/CVE-2021-31873No fix available (latest release of klibc for Ubuntu 20.04 is 2.0.7-1ubuntu5)CVE-2021-335749.8https://nvd.nist.gov/vuln/detail/CVE-2021-33574 Will not be fixed in Ubuntu stable releasesCVE-2021-459519.8https://nvd.nist.gov/vuln/detail/CVE-2021-45951No fix available (vendor disputed)CVE-2021-459529.8https://nvd.nist.gov/vuln/detail/CVE-2021-45952No fix available (vendor disputed)CVE-2021-459539.8https://nvd.nist.gov/vuln/detail/CVE-2021-45953No fix available (vendor disputed)CVE-2021-459549.8https://nvd.nist.gov/vuln/detail/CVE-2021-45954No fix available (vendor disputed)CVE-2021-459559.8https://nvd.nist.gov/vuln/detail/CVE-2021-45955No fix available (vendor disputed)CVE-2021-459569.8https://nvd.nist.gov/vuln/detail/CVE-2021-45956No fix available (vendor disputed)CVE-2021-459579.8https://nvd.nist.gov/vuln/detail/CVE-2021-45957No fix available (vendor disputed)CVE-2022-232189.8https://nvd.nist.gov/vuln/detail/CVE-2022-23218Reported fixed in 2.31-0ubuntu9.7 (installed), but still reported by VulsCVE-2022-232199.8https://nvd.nist.gov/vuln/detail/CVE-2022-23219Reported fixed in 2.31-0ubuntu9.7 (installed), but still reported by VulsCVE-2016-91809.1https://nvd.nist.gov/vuln/detail/CVE-2016-9180No fix availableCVE-2021-359429.1https://nvd.nist.gov/vuln/detail/CVE-2021-35942Reported fixed in 2.31-0ubuntu9.7 (installed), but still reported by Vuls

Lynis

Nexus URL (run via Bluval, without fixes): https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-bluval/2/

Nexus URL (manual run, with fixes): https://nexus.akraino.org/content/sites/logs/fujitsu/job/sdt-lynis/2/

The initial results compare with the Lynis Incubation: PASS/FAIL Criteria, v1.0 as follows.

...