search

eliasgranderubio / dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities
Apache License 2.0
1.15k stars 160 forks source link

Dagda confuses libraries #66

Closed BorjaPintos closed 4 years ago

BorjaPintos commented 4 years ago

Short description

I'm a researcher from Tegra Cibersecurity Center in Galicia. We have done an analysis of different docker images and we have found that in percona:latest image , for the library "net-tools 2.0", dagda reports vulnerabilities from ".net framework 2.0".

net-tools

eliasgranderubio commented 4 years ago

Hi @BorjaPintos ,

Both BID and Exploit DB information is not CVE notation based so when Dagda queries to the database, that query is based on suggestion of simility so in this case, the result is the mongoDB suggestion.

If you hhave reviewed and all of these vulnerabilities are false positive, you can use the API for mark this info as false positive and will not shown again. Review the wiki for more info about this false positive API.

Regards.

BorjaPintos commented 4 years ago

Ok, thank you for your answer