cveresources

package
v1.2.1-sp5 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: May 30, 2023 License: AGPL-3.0 Imports: 16 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func AbbrCheck 

func AbbrCheck(name string, info ProductsTable) bool

func AccessComplexityVerbose 

func AccessComplexityVerbose(i string) string

func CreateOrUpdateCVE 

func CreateOrUpdateCVE(db *gorm.DB, id string, cve *CVE) error

func CreateOrUpdateCWE 

func CreateOrUpdateCWE(db *gorm.DB, id string, i interface{}) error

func ExtendCheck 

func ExtendCheck(name string, info ProductsTable) bool

func FilterCVE 

func FilterCVE(db *gorm.DB, req *ypb.QueryCVERequest) *gorm.DB

func FixProductName 

func FixProductName(ProductName string, db *gorm.DB) string

func IsNum 

func IsNum(s string) bool

IsNum 判断是否是数字

func MarshalCheck 

func MarshalCheck(v any) []byte

func ReduceCheck 

func ReduceCheck(name string, info ProductsTable) bool

func RegisterDesc 

func RegisterDesc(d map[string]CVEDesc)

func Set 

func Set(s []string) []string

func SeverityVerbose 

func SeverityVerbose(i string) string

func StatusVerbose 

func StatusVerbose(i string) string

func ToReg 

func ToReg(start, end string, startFlag, endFlag bool) []string

func VersionCompare 

func VersionCompare(v1, v2 string) (int, float64)

func YieldCVEs 

func YieldCVEs(db *gorm.DB, ctx context.Context) chan *CVE

func YieldCWEs 

func YieldCWEs(db *gorm.DB, ctx context.Context) chan *CWE

Types

type BaseMetricV2 

type BaseMetricV2 struct {
	CvssV2                  CvssV2  `json:"cvssV2"`
	Severity                string  `json:"severity"`
	ExploitabilityScore     float64 `json:"exploitabilityScore"`
	ImpactScore             float64 `json:"impactScore"`
	ObtainAllPrivilege      bool    `json:"obtainAllPrivilege"`
	ObtainUserPrivilege     bool    `json:"obtainUserPrivilege"`
	ObtainOtherPrivilege    bool    `json:"obtainOtherPrivilege"`
	UserInteractionRequired bool    `json:"userInteractionRequired"`
}

type BaseMetricV3 

type BaseMetricV3 struct {
	CvssV3                  CvssV3  `json:"cvssV3"`
	ExploitabilityScore     float64 `json:"exploitabilityScore"`
	ImpactScore             float64 `json:"impactScore"`
	ObtainAllPrivilege      bool    `json:"obtainAllPrivilege"`
	ObtainUserPrivilege     bool    `json:"obtainUserPrivilege"`
	ObtainOtherPrivilege    bool    `json:"obtainOtherPrivilege"`
	UserInteractionRequired bool    `json:"userInteractionRequired"`
}

type CNNVD 

type CNNVD struct {
	CnnvdID     string `gorm:"primary_key"`
	Name        string
	Published   time.Time
	Modified    time.Time
	Source      string
	Severity    string
	VulnType    string
	Thrtype     string
	Description string
	CveId       string
	Refs        string
	Solution    string
}

type CPE 

type CPE struct {
	//cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*
	Part, Vendor, Product, Version, Edition string
}

func ParseToCPE 

func ParseToCPE(cpeStr string) (*CPE, error)

ParseToCPE 将字符串解析成CPE结构体

type CVE 

type CVE struct {
	gorm.Model

	CVE               string `gorm:"uniqueIndex"`
	CWE               string
	ProblemType       []byte
	References        []byte
	TitleZh           string
	Solution          string
	DescriptionMain   string
	DescriptionMainZh string
	Descriptions      []byte
	Vendor            string
	Product           string

	CPEConfigurations []byte

	CVSSVersion      string
	CVSSVectorString string

	// 攻击路径
	AccessVector string
	// 攻击复杂度
	AccessComplexity string
	// 需要认证
	Authentication string
	// 机密性影响（泄密）
	ConfidentialityImpact string
	// 完整性影响（破坏程度）
	IntegrityImpact string
	// 可用性影响（导致服务不可用）
	AvailabilityImpact string
	// 基础评分
	BaseCVSSv2Score float64

	// 严重等级
	Severity string
	// 漏洞利用评分
	ExploitabilityScore float64
	// 漏洞影响评分
	ImpactScore float64

	// 可获取所有权限
	ObtainAllPrivilege bool
	// 可获取用户权限
	ObtainUserPrivilege bool
	// 可获取其他权限
	ObtainOtherPrivilege bool

	// 是否需要用户交互
	UserInteractionRequired bool

	PublishedDate    time.Time
	LastModifiedData time.Time
}

func GetCVE 

func GetCVE(db *gorm.DB, id string) (*CVE, error)

func QueryCVE 

func QueryCVE(db *gorm.DB, req *ypb.QueryCVERequest) (*bizhelper.Paginator, []*CVE, error)

func (*CVE) ToGPRCModel 

func (c *CVE) ToGPRCModel() *ypb.CVEDetail

func (*CVE) Year 

func (c *CVE) Year() int

type CVEDataMeta 

type CVEDataMeta struct {
	ID       string `json:"ID"`
	ASSIGNER string `json:"ASSIGNER"`
}

type CVEDesc 

type CVEDesc struct {
	TitleZh           string
	Solution          string
	DescriptionMainZh string
}

type CVERecord 

type CVERecord struct {
	Cve              Cve            `json:"cve"`
	Configurations   Configurations `json:"configurations"`
	Impact           Impact         `json:"impact"`
	PublishedDate    string         `json:"publishedDate"`
	LastModifiedDate string         `json:"lastModifiedDate"`
}

func (*CVERecord) CVEId 

func (r *CVERecord) CVEId() string

func (*CVERecord) CWE 

func (r *CVERecord) CWE() string

func (*CVERecord) DescriptionMain 

func (r *CVERecord) DescriptionMain() string

func (*CVERecord) GetLastModifiedDate 

func (r *CVERecord) GetLastModifiedDate() time.Time

func (*CVERecord) GetPublishedDate 

func (r *CVERecord) GetPublishedDate() time.Time

func (*CVERecord) ToCVE 

func (record *CVERecord) ToCVE(db *gorm.DB) (*CVE, error)

type CVERes 

type CVERes struct {
	CVE
	ConfidenceLevel float64
}

func (CVERes) CNNVD 

func (c CVERes) CNNVD(dir string) (CNNVD, error)

func (CVERes) CWE 

func (c CVERes) CWE(rule string) bool

func (CVERes) Year 

func (c CVERes) Year() int

type CVEYearFile 

type CVEYearFile struct {
	CVEDataType         string      `json:"CVE_data_type"`
	CVEDataFormat       string      `json:"CVE_data_format"`
	CVEDataVersion      string      `json:"CVE_data_version"`
	CVEDataNumberOfCVEs string      `json:"CVE_data_numberOfCVEs"`
	CVEDataTimestamp    string      `json:"CVE_data_timestamp"`
	CVERecords          []CVERecord `json:"CVE_Items"`
}

type CWE 

type CWE struct {
	Id     int    `json:"id" gorm:"primary_key"`
	IdStr  string `json:"id_str" gorm:"uniqueIndex"`
	Name   string
	NameZh string

	// 描述 CWE 之间的关系
	Parent   string `json:"parent"`   // 父子关系
	Siblings string `json:"siblings"` // 兄弟关系
	InferTo  string `json:"infer_to"` // 推导关系(有上一个问题，多半也会有这个问题)
	Requires string `json:"requires"` // 依赖关系

	Status                string // CWE 发布状态 draft / incomplete / stable
	Stable                bool
	Incomplete            bool
	Description           string
	DescriptionZh         string
	ExtendedDescription   string
	ExtendedDescriptionZh string
	Abstraction           string // base / varint
	RelativeLanguage      string // 可能出现的语言
	CWESolution           string // 修复方案
	CVEExamples           string // 典型 CVE 案例
	CAPECVectors          string
}

func GetCWE 

func GetCWE(db *gorm.DB, id string) (*CWE, error)

func (*CWE) BeforeSave 

func (c *CWE) BeforeSave() error

func (*CWE) CWEString 

func (c *CWE) CWEString() string

func (*CWE) ToGRPCModel 

func (c *CWE) ToGRPCModel() *ypb.CWEDetail

type Configurations 

type Configurations struct {
	CVEDataVersion string  `json:"CVE_data_version"`
	Nodes          []Nodes `json:"nodes"`
}

type CpeMatch 

type CpeMatch struct {
	Vulnerable            bool   `json:"vulnerable"`
	Cpe23URI              string `json:"cpe23Uri"`
	VersionStartExcluding string `json:"versionStartExcluding"`
	VersionEndExcluding   string `json:"versionEndExcluding"`
	VersionStartIncluding string `json:"versionStartIncluding"`
	VersionEndIncluding   string `json:"versionEndIncluding"`
}

func (CpeMatch) Calculate 

func (m CpeMatch) Calculate(cpe CPE) float64

type Cve 

type Cve struct {
	DataType        string          `json:"data_type"`
	DataFormat      string          `json:"data_format"`
	DataVersion     string          `json:"data_version"`
	CVEDataMeta     CVEDataMeta     `json:"CVE_data_meta"`
	Problemtype     Problemtype     `json:"problemtype"`
	References      References      `json:"references"`
	DescriptionInfo DescriptionInfo `json:"description"`
}

type CvssV2 

type CvssV2 struct {
	Version               string  `json:"version"`
	VectorString          string  `json:"vectorString"`
	AccessVector          string  `json:"accessVector"`
	AccessComplexity      string  `json:"accessComplexity"`
	Authentication        string  `json:"authentication"`
	ConfidentialityImpact string  `json:"confidentialityImpact"`
	IntegrityImpact       string  `json:"integrityImpact"`
	AvailabilityImpact    string  `json:"availabilityImpact"`
	BaseScore             float64 `json:"baseScore"`
}

type CvssV3 

type CvssV3 struct {
	Version               string  `json:"version"`
	VectorString          string  `json:"vectorString"`
	AttackVector          string  `json:"attackVector"`
	AttackComplexity      string  `json:"attackComplexity"`
	PrivilegesRequired    string  `json:"privilegesRequired"`
	UserInteraction       string  `json:"userInteraction"`
	Scope                 string  `json:"scope"`
	ConfidentialityImpact string  `json:"confidentialityImpact"`
	IntegrityImpact       string  `json:"integrityImpact"`
	AvailabilityImpact    string  `json:"availabilityImpact"`
	BaseScore             float64 `json:"baseScore"`
	BaseSeverity          string  `json:"baseSeverity"`
}

type Description 

type Description struct {
	Lang  string `json:"lang"`
	Value string `json:"value"`
}

type DescriptionData 

type DescriptionData struct {
	Lang  string `json:"lang"`
	Value string `json:"value"`
}

type DescriptionInfo 

type DescriptionInfo struct {
	DescriptionData []DescriptionData `json:"description_data"`
}

type Impact 

type Impact struct {
	BaseMetricV2 BaseMetricV2 `json:"baseMetricV2"`
	BaseMetricV3 BaseMetricV3 `json:"baseMetricV3"`
}

type Nodes 

type Nodes struct {
	Operator string     `json:"operator"`
	CpeMatch []CpeMatch `json:"cpe_match"`
	Children []Nodes    `json:"children"`
}

func (Nodes) GetProduct 

func (n Nodes) GetProduct() []string

func (Nodes) GetProductVersion 

func (n Nodes) GetProductVersion(name string) []map[string]string

func (Nodes) GetVendor 

func (n Nodes) GetVendor() []string

func (Nodes) Result 

func (n Nodes) Result(CheckCpe []CPE) float64

func (Nodes) Version 

func (n Nodes) Version() []string

type Problemtype 

type Problemtype struct {
	ProblemtypeData []ProblemtypeData `json:"problemtype_data"`
}

type ProblemtypeData 

type ProblemtypeData struct {
	Description []Description `json:"description"`
}

type ProductsTable 

type ProductsTable struct {
	Product string `gorm:"primary_key"`
	Vendor  string
}

type ReferenceData 

type ReferenceData struct {
	URL       string        `json:"url"`
	Name      string        `json:"name"`
	Refsource string        `json:"refsource"`
	Tags      []interface{} `json:"tags"`
}

type References 

type References struct {
	ReferenceData []ReferenceData `json:"reference_data"`
}

type SqliteManager 

type SqliteManager struct {
	*gorm.DB
}

func GetManager 

func GetManager(path string) *SqliteManager

func (SqliteManager) SaveCNNVDRecord 

func (m SqliteManager) SaveCNNVDRecord(node xmlquery.Node)

func (*SqliteManager) SaveCVERecord 

func (m *SqliteManager) SaveCVERecord(record *CVERecord)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.