future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
https://vuls.io/
GNU General Public License v3.0
10.96k stars 1.16k forks source link

Raspbian Pi OS scanning using OVAL DB #1001

Closed kotakanbe closed 4 years ago

MaineK00n commented 4 years ago

Hello, this is @MaineK00n. I will report on this issue.

Current status

When using Raspbian, the scan mode is not limited to deep but refers to Changelog. Raspbian is the OS that optimized Debian for Raspberry Pi as follows.

Raspbian is a free operating system based on Debian optimized for the Raspberry Pi hardware.

Therefore, I think that it is possible to scan using OVAL dictionary for Debian. However, the package is optimized for Raspberry Pi as follows. Therefore, it may not be possible to simply apply the Debian Oval dictionary.

The initial build of over 35,000 Raspbian packages, optimized for best performance on the Raspberry Pi

ref: https://www.raspbian.org/

Verification policy

There seems to be no OVAL dictionary for Raspbian, so I'd like to use the Debian OVAL dictionary corresponding to the Raspbian version.

ref: https://oval.cisecurity.org/repository/search

Environment

pi@raspberrypi:~ $ cat /etc/issue
Raspbian GNU/Linux 10 \n \l
pi@raspberrypi:~ $ uname -a
Linux raspberrypi 4.19.118-v7+ #1311 SMP Mon Apr 27 14:21:24 BST 2020 armv7l GNU/Linux

NOTE: This survey is invalid. The following changes do not refer to OVAL DB.

Results

As a verification method, delete the scan result of v0.9.8 and remove the o.Distro.Family == config.Raspbian from the referenced line, and compare the result when the Changelog is not referenced. https://github.com/future-architect/vuls/blob/8a611f9ba6d470cbaa3b781c92c96f5fc9f0b3ba/scan/debian.go#L308

First, prepare an OVAL dictionary for Debian that corresponds to your Raspbian.

$ goval-dictionary fetch-debian 10

Here is the config.toml used.

[cveDict]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/cve.sqlite3"

[ovalDict]
type = "sqlite3"
SQLite3Path = "/home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3"

[gost]
type = "sqlite3"
SQLite3Path = "/usr/share/vuls-data/gost.sqlite3"

[servers]

[servers.raspi]
host = "192.168.11.21"
port = "22"
user = "pi"
keyPath = "/home/mainek00n/.ssh/id_rsa"
scanMode = [ "fast" ]

The scan mode was verified as fast, fast-root, and deep.

1. fast

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 23 17:25:27] INFO [localhost] Validating config... [Jun 23 17:25:27] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T17:25:24+09:00 [Jun 23 17:25:27] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-23|17:25:27] Opening DB. db=sqlite3 INFO[06-23|17:25:27] Migrating DB. db=sqlite3 INFO[06-23|17:25:27] Opening Database. db=sqlite3 INFO[06-23|17:25:27] Migrating DB. db=sqlite3 [Jun 23 17:25:27] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 23 17:25:27] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 23 17:25:27] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 23 17:25:27] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 23 17:25:27] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 23 17:25:27] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 23 17:25:27] INFO [localhost] Fill exploit information with Exploit-DB [Jun 23 17:25:27] INFO [localhost] raspi: 0 exploits are detected raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 exploits, en: 0, ja: 0 alerts No CVE-IDs are found in updatable packages. 1337 installed


- use OVAL dictionary for Debian
```bash
$ ./vuls scan
[Jun 23 17:15:49]  INFO [localhost] Start scanning
[Jun 23 17:15:49]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 23 17:15:49]  INFO [localhost] Validating config...
[Jun 23 17:15:49]  INFO [localhost] Detecting Server/Container OS...
[Jun 23 17:15:49]  INFO [localhost] Detecting OS of servers...
[Jun 23 17:15:50]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 23 17:15:50]  INFO [localhost] Detecting OS of containers...
[Jun 23 17:15:50]  INFO [localhost] Checking Scan Modes...
[Jun 23 17:15:50]  INFO [localhost] Detecting Platforms...
[Jun 23 17:15:51]  INFO [localhost] (1/1) raspi is running on other
[Jun 23 17:15:51]  INFO [localhost] Detecting IPS identifiers...
[Jun 23 17:15:51]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 23 17:15:51]  INFO [localhost] Scanning vulnerabilities...
[Jun 23 17:15:51]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 23 17:15:51]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 23 17:15:51]  INFO [raspi] Scanning in fast mode
One Line Summary
================
raspi   raspbian10      1337 installed
To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 23 17:15:59]  INFO [localhost] Validating config...
[Jun 23 17:15:59]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T17:15:51+09:00
[Jun 23 17:15:59]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-23|17:15:59] Opening DB.                              db=sqlite3
INFO[06-23|17:15:59] Migrating DB.                            db=sqlite3
INFO[06-23|17:15:59] Opening Database.                        db=sqlite3
INFO[06-23|17:15:59] Migrating DB.                            db=sqlite3
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 23 17:15:59]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 23 17:15:59]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 23 17:15:59]  INFO [localhost] raspi: 0 exploits are detected
raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 exploits, en: 0, ja: 0 alerts
No CVE-IDs are found in updatable packages.
1337 installed

2. fast-root

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 23 17:36:38] INFO [localhost] Validating config... [Jun 23 17:36:38] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T17:35:25+09:00 [Jun 23 17:36:38] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-23|17:36:38] Opening DB. db=sqlite3 INFO[06-23|17:36:38] Migrating DB. db=sqlite3 INFO[06-23|17:36:38] Opening Database. db=sqlite3 INFO[06-23|17:36:38] Migrating DB. db=sqlite3 [Jun 23 17:36:38] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 23 17:36:38] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 23 17:36:38] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 23 17:36:38] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 23 17:36:38] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 23 17:36:38] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 23 17:36:38] INFO [localhost] Fill exploit information with Exploit-DB [Jun 23 17:36:38] INFO [localhost] raspi: 0 exploits are detected raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 updatable, 0 exploits, en: 0, ja: 0 alerts No CVE-IDs are found in updatable packages. 1337 installed, 0 updatable


- use OVAL dictionary for Debian
```bash
$ ./vuls scan
[Jun 23 17:30:48]  INFO [localhost] Start scanning
[Jun 23 17:30:48]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 23 17:30:48]  INFO [localhost] Validating config...
[Jun 23 17:30:48]  INFO [localhost] Detecting Server/Container OS...
[Jun 23 17:30:48]  INFO [localhost] Detecting OS of servers...
[Jun 23 17:30:48]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 23 17:30:48]  INFO [localhost] Detecting OS of containers...
[Jun 23 17:30:48]  INFO [localhost] Checking Scan Modes...
[Jun 23 17:30:48]  INFO [localhost] Detecting Platforms...
[Jun 23 17:30:50]  INFO [localhost] (1/1) raspi is running on other
[Jun 23 17:30:50]  INFO [localhost] Detecting IPS identifiers...
[Jun 23 17:30:50]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 23 17:30:50]  INFO [localhost] Scanning vulnerabilities...
[Jun 23 17:30:50]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 23 17:30:50]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 23 17:30:50]  INFO [raspi] Scanning in fast-root mode
[Jun 23 17:30:50]  INFO [raspi] apt-get update...
One Line Summary
================
raspi   raspbian10      1337 installed, 0 updatable
To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 23 17:32:08]  INFO [localhost] Validating config...
[Jun 23 17:32:08]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T17:30:50+09:00
[Jun 23 17:32:08]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-23|17:32:08] Opening DB.                              db=sqlite3
INFO[06-23|17:32:08] Migrating DB.                            db=sqlite3
INFO[06-23|17:32:08] Opening Database.                        db=sqlite3
INFO[06-23|17:32:08] Migrating DB.                            db=sqlite3
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 23 17:32:08]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 23 17:32:08]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 23 17:32:08]  INFO [localhost] raspi: 0 exploits are detected
raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 updatable, 0 exploits, en: 0, ja: 0 alerts
No CVE-IDs are found in updatable packages.
1337 installed, 0 updatable

3. deep

One Line Summary

raspi raspbian10 1337 installed, 0 updatable

To view the detail, vuls tui is useful. To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 23 21:48:26] INFO [localhost] Validating config... [Jun 23 21:48:26] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T21:47:02+09:00 [Jun 23 21:48:26] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-23|21:48:26] Opening DB. db=sqlite3 INFO[06-23|21:48:26] Migrating DB. db=sqlite3 INFO[06-23|21:48:26] Opening Database. db=sqlite3 INFO[06-23|21:48:26] Migrating DB. db=sqlite3 [Jun 23 21:48:26] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 23 21:48:26] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 23 21:48:26] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 23 21:48:26] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 23 21:48:26] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 23 21:48:26] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 23 21:48:26] INFO [localhost] Fill exploit information with Exploit-DB [Jun 23 21:48:26] INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages. 1337 installed, 0 updatable


- use OVAL dictionary for Debian
```bash
$ ./vuls scan
[Jun 23 21:39:48]  INFO [localhost] Start scanning
[Jun 23 21:39:48]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 23 21:39:48]  INFO [localhost] Validating config...
[Jun 23 21:39:48]  INFO [localhost] Detecting Server/Container OS...
[Jun 23 21:39:48]  INFO [localhost] Detecting OS of servers...
[Jun 23 21:39:49]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 23 21:39:49]  INFO [localhost] Detecting OS of containers...
[Jun 23 21:39:49]  INFO [localhost] Checking Scan Modes...
[Jun 23 21:39:49]  INFO [localhost] Detecting Platforms...
[Jun 23 21:39:50]  INFO [localhost] (1/1) raspi is running on other
[Jun 23 21:39:50]  INFO [localhost] Detecting IPS identifiers...
[Jun 23 21:39:50]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 23 21:39:50]  INFO [localhost] Scanning vulnerabilities...
[Jun 23 21:39:50]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 23 21:39:50]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 23 21:39:50]  INFO [raspi] Scanning in deep mode
[Jun 23 21:39:50]  INFO [raspi] apt-get update...

One Line Summary
================
raspi   raspbian10      1337 installed, 0 updatable

To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 23 21:40:53]  INFO [localhost] Validating config...
[Jun 23 21:40:53]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-23T21:39:50+09:00
[Jun 23 21:40:53]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-23|21:40:53] Opening DB.                              db=sqlite3
INFO[06-23|21:40:53] Migrating DB.                            db=sqlite3
INFO[06-23|21:40:53] Opening Database.                        db=sqlite3
INFO[06-23|21:40:53] Migrating DB.                            db=sqlite3
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 23 21:40:53]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 23 21:40:53]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 23 21:40:53]  INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages.
1337 installed, 0 updatable

Conclusion

In the verification this time, there was no difference in the results when using the conventional Changelog and when using the OVAL dictionary for Debian. Therefore, even if the scan target is Raspbian, if the scan mode is not deep, it may be better to use the OVAL dictionary for Debian. However, this verification environment does not have many packages installed, and some contents that cannot be covered by the OVAL dictionary for Debian may occur.

MaineK00n commented 4 years ago

Hello, this is @MaineK00n.

In the other day's investigation, I updated all the packages with the setup wizard at startup, so I thought that the difference might have disappeared in the result, so I conducted additional verification. In conclusion, both results were the same.

Enviroment

The verification environment was prepared to be the same as the previous one as much as possible. What is different from the last time is that the package is not updated (apt update && apt upgrade) by the setup wizard at startup. However, I installed debian-goodies for scanning fast-root and deep.(apt update && apt install debian-goodies)

pi@raspberrypi:~ $ uname -a Linux raspberrypi 4.19.118-v7+ #1311 SMP Mon Apr 27 14:21:24 BST 2020 armv7l GNU/Linux


## NOTE: This survey is invalid. The following changes do not refer to OVAL DB.
## Results
The verification method and the used config.toml are the same as before, so I will omit them.

### 1. fast
- v0.9.8
```bash
$ ./vuls scan
[Jun 24 14:50:57]  INFO [localhost] Start scanning
[Jun 24 14:50:57]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 24 14:50:57]  INFO [localhost] Validating config...
[Jun 24 14:50:57]  INFO [localhost] Detecting Server/Container OS...
[Jun 24 14:50:57]  INFO [localhost] Detecting OS of servers...
[Jun 24 14:50:58]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 24 14:50:58]  INFO [localhost] Detecting OS of containers...
[Jun 24 14:50:58]  INFO [localhost] Checking Scan Modes...
[Jun 24 14:50:58]  INFO [localhost] Detecting Platforms...
[Jun 24 14:50:59]  INFO [localhost] (1/1) raspi is running on other
[Jun 24 14:50:59]  INFO [localhost] Detecting IPS identifiers...
[Jun 24 14:50:59]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 24 14:50:59]  INFO [localhost] Scanning vulnerabilities...
[Jun 24 14:50:59]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 24 14:50:59]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 24 14:50:59]  INFO [raspi] Scanning in fast mode
One Line Summary
================
raspi   raspbian10      1337 installed
To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 24 14:51:07]  INFO [localhost] Validating config...
[Jun 24 14:51:07]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T14:50:59+09:00
[Jun 24 14:51:07]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-24|14:51:07] Opening DB.                              db=sqlite3
INFO[06-24|14:51:07] Migrating DB.                            db=sqlite3
INFO[06-24|14:51:07] Opening Database.                        db=sqlite3
INFO[06-24|14:51:07] Migrating DB.                            db=sqlite3
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 24 14:51:07]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 24 14:51:07]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 24 14:51:07]  INFO [localhost] raspi: 0 exploits are detected
raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 exploits, en: 0, ja: 0 alerts
No CVE-IDs are found in updatable packages.
1337 installed

One Line Summary

raspi raspbian10 1337 installed

To view the detail, vuls tui is useful. To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 24 15:04:23] INFO [localhost] Validating config... [Jun 24 15:04:23] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T15:04:19+09:00 [Jun 24 15:04:23] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-24|15:04:23] Opening DB. db=sqlite3 INFO[06-24|15:04:23] Migrating DB. db=sqlite3 INFO[06-24|15:04:23] Opening Database. db=sqlite3 INFO[06-24|15:04:23] Migrating DB. db=sqlite3 [Jun 24 15:04:23] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 24 15:04:23] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 24 15:04:23] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 24 15:04:23] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 24 15:04:23] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 24 15:04:23] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 24 15:04:23] INFO [localhost] Fill exploit information with Exploit-DB [Jun 24 15:04:23] INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages. 1337 installed


### 2. fast-root
- v0.9.8
```bash
$ ./vuls scan
[Jun 24 15:00:09]  INFO [localhost] Start scanning
[Jun 24 15:00:09]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 24 15:00:09]  INFO [localhost] Validating config...
[Jun 24 15:00:09]  INFO [localhost] Detecting Server/Container OS...
[Jun 24 15:00:09]  INFO [localhost] Detecting OS of servers...
[Jun 24 15:00:09]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 24 15:00:09]  INFO [localhost] Detecting OS of containers...
[Jun 24 15:00:09]  INFO [localhost] Checking Scan Modes...
[Jun 24 15:00:09]  INFO [localhost] Detecting Platforms...
[Jun 24 15:00:10]  INFO [localhost] (1/1) raspi is running on other
[Jun 24 15:00:10]  INFO [localhost] Detecting IPS identifiers...
[Jun 24 15:00:10]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 24 15:00:10]  INFO [localhost] Scanning vulnerabilities...
[Jun 24 15:00:10]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 24 15:00:10]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 24 15:00:10]  INFO [raspi] Scanning in fast-root mode
[Jun 24 15:00:10]  INFO [raspi] apt-get update...
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlccore9
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-bootloader
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-qt
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi0
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-eeprom-images
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-eeprom.changelog  Changelog unavailable for rpi-eeprom=7.4-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-base
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog lxpanel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/lxpanel.changelog  Changelog unavailable for lxpanel=0.10.0-2+rpt11

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:38]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:39]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-video-output
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:42]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-greeter
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-greeter.changelog  Changelog unavailable for pi-greeter=0.12

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:43]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspi-config
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspi-config.changelog  Changelog unavailable for raspi-config=20200601

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:43]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:43]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog piwiz
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/piwiz.changelog  Changelog unavailable for piwiz=0.15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:43]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-samba
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:44]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:44]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-modules
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:44]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-dev
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:44]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-gtk4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:45]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:47]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-video-splitter
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:48]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-notify
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:48]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-extra4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:48]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-gtk-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:49]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pipanel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pipanel.changelog  Changelog unavailable for pipanel=1:1.5

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:49]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog lxpanel-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/lxpanel.changelog  Changelog unavailable for lxpanel=0.10.0-2+rpt11

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:49]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog arandr
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/arandr.changelog  Changelog unavailable for arandr=0.1.9-2+rpt12

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:49]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rp-prefapps
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rp-prefapps.changelog  Changelog unavailable for rp-prefapps=0.22

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:50]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pcmanfm
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pcmanfm.changelog  Changelog unavailable for pcmanfm=1.3.1-1+rpt22

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:50]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog piclone
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/piclone.changelog  Changelog unavailable for piclone=0.16

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:52]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-doc
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:53]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-skins2
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:54]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package-session
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:54]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-ui-mods
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-ui-mods.changelog  Changelog unavailable for raspberrypi-ui-mods=1.20200611

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:54]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:54]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlc-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:54]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-kernel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:55]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-eeprom
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-eeprom.changelog  Changelog unavailable for rpi-eeprom=7.4-1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:55]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-l10n
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:55]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:56]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-visualization
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:57]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog ca-certificates
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/ca-certificates.changelog  Changelog unavailable for ca-certificates=20200601~deb10u1

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:57]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:57]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rp-bookshelf
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rp-bookshelf.changelog  Changelog unavailable for rp-bookshelf=0.4

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:57]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-chromium-mods
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-chromium-mods.changelog  Changelog unavailable for rpi-chromium-mods=20200602

  stderr:
  err: %!s(<nil>)
[Jun 24 15:00:57]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlc5
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)

One Line Summary
================
raspi   raspbian10      1337 installed, 45 updatable

To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 24 15:01:42]  INFO [localhost] Validating config...
[Jun 24 15:01:42]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T15:00:10+09:00
[Jun 24 15:01:42]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-24|15:01:42] Opening DB.                              db=sqlite3
INFO[06-24|15:01:42] Migrating DB.                            db=sqlite3
INFO[06-24|15:01:42] Opening Database.                        db=sqlite3
INFO[06-24|15:01:42] Migrating DB.                            db=sqlite3
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 24 15:01:42]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 24 15:01:42]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 24 15:01:42]  INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 45 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages.
1337 installed, 45 updatable

One Line Summary

raspi raspbian10 1337 installed, 45 updatable

To view the detail, vuls tui is useful. To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 24 15:08:07] INFO [localhost] Validating config... [Jun 24 15:08:07] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T15:05:20+09:00 [Jun 24 15:08:07] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-24|15:08:07] Opening DB. db=sqlite3 INFO[06-24|15:08:07] Migrating DB. db=sqlite3 INFO[06-24|15:08:07] Opening Database. db=sqlite3 INFO[06-24|15:08:07] Migrating DB. db=sqlite3 [Jun 24 15:08:07] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 24 15:08:07] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 24 15:08:07] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 24 15:08:07] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 24 15:08:07] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 24 15:08:07] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 24 15:08:07] INFO [localhost] Fill exploit information with Exploit-DB [Jun 24 15:08:07] INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 45 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages. 1337 installed, 45 updatable


### 3. deep
- v0.9.8
```bash
$ ./vuls scan
[Jun 24 14:55:41]  INFO [localhost] Start scanning
[Jun 24 14:55:41]  INFO [localhost] config: /home/mainek00n/github/github.com/MaineK00n/vuls/config.toml
[Jun 24 14:55:41]  INFO [localhost] Validating config...
[Jun 24 14:55:41]  INFO [localhost] Detecting Server/Container OS...
[Jun 24 14:55:41]  INFO [localhost] Detecting OS of servers...
[Jun 24 14:55:42]  INFO [localhost] (1/1) Detected: raspi: raspbian 10
[Jun 24 14:55:42]  INFO [localhost] Detecting OS of containers...
[Jun 24 14:55:42]  INFO [localhost] Checking Scan Modes...
[Jun 24 14:55:42]  INFO [localhost] Detecting Platforms...
[Jun 24 14:55:43]  INFO [localhost] (1/1) raspi is running on other
[Jun 24 14:55:43]  INFO [localhost] Detecting IPS identifiers...
[Jun 24 14:55:43]  INFO [localhost] (1/1) raspi has 0 IPS integration
[Jun 24 14:55:43]  INFO [localhost] Scanning vulnerabilities...
[Jun 24 14:55:43]  INFO [localhost] Open boltDB: /home/mainek00n/github/github.com/MaineK00n/vuls/cache.db
[Jun 24 14:55:43]  INFO [localhost] Scanning vulnerable OS packages...
[Jun 24 14:55:43]  INFO [raspi] Scanning in deep mode
[Jun 24 14:55:43]  INFO [raspi] apt-get update...
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-ui-mods
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-ui-mods.changelog  Changelog unavailable for raspberrypi-ui-mods=1.20200611

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog lxpanel-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/lxpanel.changelog  Changelog unavailable for lxpanel=0.10.0-2+rpt11

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-chromium-mods
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-chromium-mods.changelog  Changelog unavailable for rpi-chromium-mods=20200602

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-skins2
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rp-prefapps
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rp-prefapps.changelog  Changelog unavailable for rp-prefapps=0.22

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package-session
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-gtk4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:14]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-extra4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:15]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-eeprom
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-eeprom.changelog  Changelog unavailable for rpi-eeprom=7.4-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-l10n
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlccore9
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog piwiz
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/piwiz.changelog  Changelog unavailable for piwiz=0.15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rp-bookshelf
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rp-bookshelf.changelog  Changelog unavailable for rp-bookshelf=0.4

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-samba
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:19]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-bootloader
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:20]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog arandr
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/arandr.changelog  Changelog unavailable for arandr=0.1.9-2+rpt12

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:20]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-visualization
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:20]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:20]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-video-output
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:24]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-doc
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:24]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pipanel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pipanel.changelog  Changelog unavailable for pipanel=1:1.5

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:24]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:24]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspi-config
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspi-config.changelog  Changelog unavailable for raspi-config=20200601

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:24]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:25]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm4
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:25]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-gtk-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:25]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlc-bin
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:25]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog piclone
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/piclone.changelog  Changelog unavailable for piclone=0.16

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:25]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pcmanfm
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pcmanfm.changelog  Changelog unavailable for pcmanfm=1.3.1-1+rpt22

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:29]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-qt
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:29]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:29]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi0
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libvlc5
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog raspberrypi-kernel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-base
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog ca-certificates
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/ca-certificates.changelog  Changelog unavailable for ca-certificates=20200601~deb10u1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-notify
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:30]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libraspberrypi-dev
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/raspberrypi-firmware.changelog  Changelog unavailable for raspberrypi-firmware=1.20200601-1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:32]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog vlc-plugin-video-splitter
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/vlc.changelog  Changelog unavailable for vlc=3.0.11-0+deb10u1+rpt1

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:33]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog lxpanel
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/lxpanel.changelog  Changelog unavailable for lxpanel=0.10.0-2+rpt11

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:33]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-greeter
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-greeter.changelog  Changelog unavailable for pi-greeter=0.12

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:33]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog pi-package-data
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/pi-package.changelog  Changelog unavailable for pi-package=0.7

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:33]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog libfm-modules
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/libfm.changelog  Changelog unavailable for libfm=1.3.1-1+rpt15

  stderr:
  err: %!s(<nil>)
[Jun 24 14:56:33]  WARN [raspi] Failed to SSH: execResult: servername: raspi
  cmd: /usr/bin/ssh -tt -o StrictHostKeyChecking=yes -o LogLevel=quiet -o ConnectionAttempts=3 -o ConnectTimeout=10 -o ControlMaster=auto -o ControlPath=/home/mainek00n/.vuls/controlmaster-%r-raspi.%p -o Controlpersist=10m pi@192.168.11.21 -p 22 -i /home/mainek00n/.ssh/id_rsa -o PasswordAuthentication=no stty cols 1000; PAGER=cat apt-get -q=2 changelog rpi-eeprom-images
  exitstatus: 100
  stdout: E: Failed to fetch changelog:/rpi-eeprom.changelog  Changelog unavailable for rpi-eeprom=7.4-1

  stderr:
  err: %!s(<nil>)

One Line Summary
================
raspi   raspbian10      1337 installed, 45 updatable

To view the detail, vuls tui is useful.
To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3
[Jun 24 14:57:30]  INFO [localhost] Validating config...
[Jun 24 14:57:30]  INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T14:55:43+09:00
[Jun 24 14:57:30]  INFO [localhost] Validating db config...
INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3
INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3
INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3
INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3
INFO[06-24|14:57:30] Opening DB.                              db=sqlite3
INFO[06-24|14:57:30] Migrating DB.                            db=sqlite3
INFO[06-24|14:57:30] Opening Database.                        db=sqlite3
INFO[06-24|14:57:30] Migrating DB.                            db=sqlite3
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 CVEs are detected with Library
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 CVEs are detected with OVAL
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 CVEs are detected with CPE
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 unfixed CVEs are detected with gost
[Jun 24 14:57:30]  INFO [localhost] Fill CVE detailed information with CVE-DB
[Jun 24 14:57:30]  INFO [localhost] Fill exploit information with Exploit-DB
[Jun 24 14:57:30]  INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)
==================
Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 45 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages.
1337 installed, 45 updatable

One Line Summary

raspi raspbian10 1337 installed, 45 updatable

To view the detail, vuls tui is useful. To send a report, run vuls report -h.

$ ./vuls report --exploitdb-sqlite3-path=/usr/share/vuls-data/go-exploitdb.sqlite3 [Jun 24 15:11:11] INFO [localhost] Validating config... [Jun 24 15:11:11] INFO [localhost] Loaded: /home/mainek00n/github/github.com/MaineK00n/vuls/results/2020-06-24T15:09:45+09:00 [Jun 24 15:11:11] INFO [localhost] Validating db config... INFO[0000] -cvedb-type: sqlite3, -cvedb-url: , -cvedb-path: /usr/share/vuls-data/cve.sqlite3 INFO[0000] -ovaldb-type: sqlite3, -ovaldb-url: , -ovaldb-path: /home/mainek00n/github/github.com/MaineK00n/vuls/oval.sqlite3 INFO[0000] -gostdb-type: sqlite3, -gostdb-url: , -gostdb-path: /usr/share/vuls-data/gost.sqlite3 INFO[0000] -exploitdb-type: sqlite3, -exploitdb-url: , -exploitdb-path: /usr/share/vuls-data/go-exploitdb.sqlite3 INFO[06-24|15:11:11] Opening DB. db=sqlite3 INFO[06-24|15:11:11] Migrating DB. db=sqlite3 INFO[06-24|15:11:11] Opening Database. db=sqlite3 INFO[06-24|15:11:11] Migrating DB. db=sqlite3 [Jun 24 15:11:11] INFO [localhost] raspi: 0 CVEs are detected with Library [Jun 24 15:11:11] INFO [localhost] raspi: 0 CVEs are detected with OVAL [Jun 24 15:11:11] INFO [localhost] raspi: 0 CVEs are detected with CPE [Jun 24 15:11:11] INFO [localhost] raspi: 0 CVEs are detected with GitHub Security Alerts [Jun 24 15:11:11] INFO [localhost] raspi: 0 unfixed CVEs are detected with gost [Jun 24 15:11:11] INFO [localhost] Fill CVE detailed information with CVE-DB [Jun 24 15:11:11] INFO [localhost] Fill exploit information with Exploit-DB [Jun 24 15:11:11] INFO [localhost] raspi: 0 exploits are detected

raspi (raspbian10)

Total: 0 (High:0 Medium:0 Low:0 ?:0), 0/0 Fixed, 1337 installed, 45 updatable, 0 exploits, en: 0, ja: 0 alerts

No CVE-IDs are found in updatable packages. 1337 installed, 45 updatable



## Conclusion
According to the report results, there was no difference in the detected CVE-IDs when using v0.9.8 and the OVAL dictionary for Debian.
When the scan is `deep`, the Changelog is referenced, but in the case of `fast-root`, those who use the OVAL dictionary for Debian do not refer to the Changelog, so the WARN that the Changelog cannot fetch is not output.
MaineK00n commented 4 years ago

Hello, this is @MaineK00n.

After consulting with @kotakanbe, I decided to scan the Raspberry Pi OS (previously called Raspbian) with the OVAL dictionary for Debian. Scanning using Changelog as usual can still be done in scan mode: deep.

There are some packages that are optimized for Rasberry Pi in the packages used by Raspberry Pi OS, and those packages have +rpt added to the version.

ex: vlc package

pi@raspberrypi:~ $ apt show vlc
Package: vlc
Version: 3.0.11-0+deb10u1+rpt1

However, if you look at the oval-definitions-buster.xml, which is the base of the OVAL dictionary for Debian, it should be noted that there is no version that includes +rpt. ref: https://www.debian.org/security/oval/

Therefore, I will remove +rpt and search for packages that include +rpt in version so that it corresponds to the OVAL dictionary for Debian. Therefore, for Raspbian-only packages such as +rpt, scan with Changelog, and for packages common to Debian, scan with OVAL.

Please let me know if you have any problems. See you.

MaineK00n commented 4 years ago

At #1019, I changed to use OVAL DB on RaspberryPi OS (Raspbian). As a result, by investigating packages common to Debian with OVAL DB and Debian Security Tracker, we were able to find vulnerabilities that cannot be detected by Changelog.

OVAL DB

image

Debian Security Tracker

image

Changelog

image