Update genesis dump (#297)

stackrox · Jan 26, 2021 · ec7c701 · ec7c701
1 parent d9cd50a
commit ec7c701
Show file tree

Hide file tree

Showing 2 changed files with 77 additions and 0 deletions.
diff --git a/e2etests/sanity_test.go b/e2etests/sanity_test.go
@@ -488,6 +488,30 @@ func TestImageSanity(t *testing.T) {
 								},
 							},
 						},
+						{
+							Name:        "CVE-2021-1723",
+							Description: "ASP.NET Core and Visual Studio Denial of Service Vulnerability",
+							Link:        "https://nvd.nist.gov/vuln/detail/CVE-2021-1723",
+							FixedBy:     "3.1.11",
+							Metadata: map[string]interface{}{
+								"NVD": map[string]interface{}{
+									"CVSSv2": map[string]interface{}{
+										"ExploitabilityScore": 10.0,
+										"ImpactScore":         2.9,
+										"Score":               5.0,
+										"Vectors":             "AV:N/AC:L/Au:N/C:N/I:N/A:P",
+									},
+									"CVSSv3": map[string]interface{}{
+										"ExploitabilityScore": 3.9,
+										"ImpactScore":         3.6,
+										"Score":               7.5,
+										"Vectors":             "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+									},
+									"LastModifiedDateTime": "2021-01-25T19:54Z",
+									"PublishedDateTime":    "2021-01-12T20:15Z",
+								},
+							},
+						},
 					},
 				},
 			},
@@ -622,6 +646,30 @@ func TestImageSanity(t *testing.T) {
 							},
 							FixedBy: "3.1.7",
 						},
+						{
+							Name:        "CVE-2021-1723",
+							Description: "ASP.NET Core and Visual Studio Denial of Service Vulnerability",
+							Link:        "https://nvd.nist.gov/vuln/detail/CVE-2021-1723",
+							FixedBy:     "3.1.11",
+							Metadata: map[string]interface{}{
+								"NVD": map[string]interface{}{
+									"CVSSv2": map[string]interface{}{
+										"ExploitabilityScore": 10.0,
+										"ImpactScore":         2.9,
+										"Score":               5.0,
+										"Vectors":             "AV:N/AC:L/Au:N/C:N/I:N/A:P",
+									},
+									"CVSSv3": map[string]interface{}{
+										"ExploitabilityScore": 3.9,
+										"ImpactScore":         3.6,
+										"Score":               7.5,
+										"Vectors":             "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+									},
+									"LastModifiedDateTime": "2021-01-25T19:54Z",
+									"PublishedDateTime":    "2021-01-12T20:15Z",
+								},
+							},
+						},
 					},
 					AddedBy:  "sha256:5bd47e7e8ad7786db14c79827b543615728f0e27567f5b05d4c13db29bb24c7a",
 					Location: "usr/share/dotnet/shared/Microsoft.AspNetCore.App/3.1.0/",
@@ -727,6 +775,30 @@ func TestImageSanity(t *testing.T) {
 							},
 							FixedBy: "3.1.6",
 						},
+						{
+							Name:        "CVE-2021-1723",
+							Description: "ASP.NET Core and Visual Studio Denial of Service Vulnerability",
+							Link:        "https://nvd.nist.gov/vuln/detail/CVE-2021-1723",
+							FixedBy:     "3.1.11",
+							Metadata: map[string]interface{}{
+								"NVD": map[string]interface{}{
+									"CVSSv2": map[string]interface{}{
+										"ExploitabilityScore": 10.0,
+										"ImpactScore":         2.9,
+										"Score":               5.0,
+										"Vectors":             "AV:N/AC:L/Au:N/C:N/I:N/A:P",
+									},
+									"CVSSv3": map[string]interface{}{
+										"ExploitabilityScore": 3.9,
+										"ImpactScore":         3.6,
+										"Score":               7.5,
+										"Vectors":             "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+									},
+									"LastModifiedDateTime": "2021-01-25T19:54Z",
+									"PublishedDateTime":    "2021-01-12T20:15Z",
+								},
+							},
+						},
 					},
 					AddedBy:  "sha256:5bd47e7e8ad7786db14c79827b543615728f0e27567f5b05d4c13db29bb24c7a",
 					Location: "usr/share/dotnet/shared/Microsoft.NETCore.App/3.1.0/",

diff --git a/image/scanner/dump/genesis_manifests.json b/image/scanner/dump/genesis_manifests.json
@@ -104,6 +104,11 @@
       "config": {
         "skipUbuntuLinuxKernelVulns": true
       }
+    },
+    {
+      "dumpLocationInGS": "gs://stackrox-scanner-ci-vuln-dump/genesis-20210125230531.zip",
+      "timestamp": "2021-01-25T23:05:31.764433988Z",
+      "diffLocation": "gs://definitions.stackrox.io/55b9538d-0d42-4bbd-b4d4-5d31421e7302/diff.zip"
     }
   ]
 }