CVE-2021-4034: Detect fixed versions for Fedora

diego-treitos / linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

GNU General Public License v3.0

3.45k stars 574 forks source link

CVE-2021-4034: Detect fixed versions for Fedora #61

Closed exploide closed 2 years ago

exploide commented 2 years ago

This adds the fixed versions for Fedora affecting CVE-2021-4034.

In order for this to work, I patched the lse_get_pkg_version function because Fedora packages contain an architecture specific suffix, like in polkit-0.120-1.fc35.2.x86_64. I remove such suffixes so the version comparison works correctly.