mirrors/poky
1
0 Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-10-15 04:57:15 +00:00
Code Issues Projects Releases Wiki Activity

cve-update-db-native: Fix FKIE CVE accessVector parsing

Browse Source 
Use "attackVector" for CVSS >= 3 as it only CVSS v2 uses "accessVector".

(From OE-Core rev: 7e4d566445a8cbe1e540e20837d45692d81af77f)

Signed-off-by: Jonathan Schnitzler <jonathan.schnitzler@faro.com>
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Jonathan Schnitzler authored and Richard Purdie committed 2025-08-28 10:47:08 +01:00
1 parent bb037c228c
commit 8b5c222b08
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
meta/recipes-core/meta/cve-update-db-native.bb
+3 -3
View File
@@ -352,7 +352,7 @@ def update_db_fkie(conn, jsondata):
try:
for m in elt['metrics']['cvssMetricV30']:
if m['type'] == 'Primary':
accessVector = m['cvssData']['accessVector']
accessVector = m['cvssData']['attackVector']
vectorString = m['cvssData']['vectorString']
cvssv3 = m['cvssData']['baseScore']
except KeyError:
@@ -361,7 +361,7 @@ def update_db_fkie(conn, jsondata):
try:
for m in elt['metrics']['cvssMetricV31']:
if m['type'] == 'Primary':
accessVector = m['cvssData']['accessVector']
accessVector = m['cvssData']['attackVector']
vectorString = m['cvssData']['vectorString']
cvssv3 = m['cvssData']['baseScore']
except KeyError:
@@ -370,7 +370,7 @@ def update_db_fkie(conn, jsondata):
try:
for m in elt['metrics']['cvssMetricV40']:
if m['type'] == 'Primary':
accessVector = m['cvssData']['accessVector']
accessVector = m['cvssData']['attackVector']
vectorString = m['cvssData']['vectorString']
cvssv4 = m['cvssData']['baseScore']
except KeyError: