diff options
Diffstat (limited to 'meta/recipes-core/meta/cve-update-nvd2-native.bb')
-rw-r--r-- | meta/recipes-core/meta/cve-update-nvd2-native.bb | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/meta/recipes-core/meta/cve-update-nvd2-native.bb b/meta/recipes-core/meta/cve-update-nvd2-native.bb index 61f4d47f96..c85df23f59 100644 --- a/meta/recipes-core/meta/cve-update-nvd2-native.bb +++ b/meta/recipes-core/meta/cve-update-nvd2-native.bb | |||
@@ -312,12 +312,19 @@ def update_db(conn, elt): | |||
312 | cvssv2 = elt['cve']['metrics']['cvssMetricV2'][0]['cvssData']['baseScore'] | 312 | cvssv2 = elt['cve']['metrics']['cvssMetricV2'][0]['cvssData']['baseScore'] |
313 | except KeyError: | 313 | except KeyError: |
314 | cvssv2 = 0.0 | 314 | cvssv2 = 0.0 |
315 | cvssv3 = None | ||
315 | try: | 316 | try: |
316 | accessVector = accessVector or elt['impact']['baseMetricV3']['cvssV3']['attackVector'] | 317 | accessVector = accessVector or elt['cve']['metrics']['cvssMetricV30'][0]['cvssData']['attackVector'] |
317 | cvssv3 = elt['impact']['baseMetricV3']['cvssV3']['baseScore'] | 318 | cvssv3 = elt['cve']['metrics']['cvssMetricV30'][0]['cvssData']['baseScore'] |
318 | except KeyError: | 319 | except KeyError: |
319 | accessVector = accessVector or "UNKNOWN" | 320 | pass |
320 | cvssv3 = 0.0 | 321 | try: |
322 | accessVector = accessVector or elt['cve']['metrics']['cvssMetricV31'][0]['cvssData']['attackVector'] | ||
323 | cvssv3 = cvssv3 or elt['cve']['metrics']['cvssMetricV31'][0]['cvssData']['baseScore'] | ||
324 | except KeyError: | ||
325 | pass | ||
326 | accessVector = accessVector or "UNKNOWN" | ||
327 | cvssv3 = cvssv3 or 0.0 | ||
321 | 328 | ||
322 | conn.execute("insert or replace into NVD values (?, ?, ?, ?, ?, ?)", | 329 | conn.execute("insert or replace into NVD values (?, ?, ?, ?, ?, ?)", |
323 | [cveId, cveDesc, cvssv2, cvssv3, date, accessVector]).close() | 330 | [cveId, cveDesc, cvssv2, cvssv3, date, accessVector]).close() |