sjvermeu / cvechecker

Command-line utility to scan the system and report on potential vulnerabilities, based on public CVE data
GNU General Public License v3.0
258 stars 68 forks source link

Inconsistent results for glibc #29

Open DerDakon opened 7 years ago

DerDakon commented 7 years ago

A few weeks before, execution of "cvechecker -r" gave some entries for glibc, which were from 2016. After updating cvechecker and the database this week and executing "cvechecker -r" again for the same watchlist, the new entries for 2016 were missing.

Code was on master with #28 applied. The missing entries are in the nvd files, but not in the data the cvechecker gets from the database in its query in the function find_cve_for_cpe().

A minimal watchlist would be:

cpe:/a:gnu:glibc:2.22:::