Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add: openvasd_get_performance() #900

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add: openvasd_get_performance() #900

wants to merge 1 commit into from

Conversation

jjnicola
Copy link
Member

@jjnicola jjnicola commented Mar 4, 2025 •
edited
Loading

What

Add: openvasd_get_performance()
Jira: SC-1039

Why

References

Checklist

  • Tests

@jjnicola jjnicola requested review from a team as code owners March 4, 2025 14:51
@github-actions GitHub Actions
Copy link

github-actions bot commented Mar 4, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA a833415.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Files

@jjnicola
Copy link
Member Author

jjnicola commented Mar 4, 2025 •
edited
Loading

Depends on greenbone/openvas-scanner#1859

@github-actions GitHub Actions
Copy link

github-actions bot commented Mar 4, 2025 •
edited
Loading

🔍 Vulnerabilities of harbor-os.greenbone.net/community/gvm-libs:900-merge-amd64

📦 Image Reference harbor-os.greenbone.net/community/gvm-libs:900-merge-amd64
digestsha256:442da6b75e135075dccbba118620d17fcb031b35b0776b07fe570510af8c77c9
vulnerabilitiescritical: 0 high: 4 medium: 4 low: 24 unspecified: 1
size68 MB
packages201
📦 Base Image debian:testing-20250224-slim
also known as
  • testing-slim
digestsha256:dd44ac7e9b6d7271b382c9bf5bce34920ecb1c3f2ec09426137a4e72de79fd11
vulnerabilitiescritical: 0 high: 0 medium: 1 low: 10
critical: 0 high: 4 medium: 2 low: 2 libxml2 2.12.7+dfsg+really2.9.14-0.2+b2 (deb)

pkg:deb/debian/[email protected]%2Bdfsg%2Breally2.9.14-0.2%2Bb2?os_distro=trixie&os_name=debian&os_version=unstable

high : CVE--2022--49043

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile12th percentile
Description

xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.

[experimental] - libxml2 2.12.3+dfsg-0exp1

high : CVE--2025--24928

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile12th percentile
Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

high : CVE--2024--56171

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile12th percentile
Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

high : CVE--2024--25062

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.09%
EPSS Percentile40th percentile
Description

An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD validation and XInclude expansion enabled, processing crafted XML documents can lead to an xmlValidatePopElement use-after-free.

[experimental] - libxml2 2.12.5+dfsg-0exp1

medium : CVE--2023--45322

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.08%
EPSS Percentile37th percentile
Description

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when memory allocations fail."

[experimental] - libxml2 2.12.3+dfsg-0exp1

medium : CVE--2023--39615

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.07%
EPSS Percentile33rd percentile
Description

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.

[experimental] - libxml2 2.12.3+dfsg-0exp1

low : CVE--2025--27113

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.05%
EPSS Percentile20th percentile
Description

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.

low : CVE--2024--34459

Affected range>=2.12.7+dfsg+really2.9.14-0.2
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile13th percentile
Description

An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.

critical: 0 high: 0 medium: 1 low: 1 libgcrypt20 1.11.0-7 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

medium : CVE--2024--2236

Affected range>=1.11.0-7
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile18th percentile
Description

A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.

low : CVE--2018--6829

Affected range>=1.11.0-7
Fixed versionNot Fixed
EPSS Score0.33%
EPSS Percentile71st percentile
Description

cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaintexts, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). The Decisional Diffie-Hellman (DDH) assumption does not hold for Libgcrypt's ElGamal implementation.

critical: 0 high: 0 medium: 1 low: 0 libcap2 1:2.66-5+b1 (deb)

pkg:deb/debian/libcap2@1:2.66-5%2Bb1?os_distro=trixie&os_name=debian&os_version=unstable

medium : CVE--2025--1390

Affected range<1:2.73-4
Fixed version1:2.73-4
EPSS Score0.04%
EPSS Percentile12th percentile
Description

The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.

critical: 0 high: 0 medium: 0 low: 4 systemd 257.3-1 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2023--31439

Affected range>=257.3-1
Fixed versionNot Fixed
EPSS Score0.14%
EPSS Percentile50th percentile
Description

An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

low : CVE--2023--31438

Affected range>=257.3-1
Fixed versionNot Fixed
EPSS Score0.11%
EPSS Percentile46th percentile
Description

An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

low : CVE--2023--31437

Affected range>=257.3-1
Fixed versionNot Fixed
EPSS Score0.09%
EPSS Percentile41st percentile
Description

An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

low : CVE--2013--4392

Affected range>=257.3-1
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile5th percentile
Description

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.

critical: 0 high: 0 medium: 0 low: 4 openldap 2.6.9+dfsg-1 (deb)

pkg:deb/debian/[email protected]%2Bdfsg-1?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2020--15719

Affected range>=2.6.9+dfsg-1
Fixed versionNot Fixed
EPSS Score0.16%
EPSS Percentile54th percentile
Description

libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName (SAN). This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux.

low : CVE--2017--17740

Affected range>=2.6.9+dfsg-1
Fixed versionNot Fixed
EPSS Score0.49%
EPSS Percentile76th percentile
Description

contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation.

low : CVE--2017--14159

Affected range>=2.6.9+dfsg-1
Fixed versionNot Fixed
EPSS Score0.05%
EPSS Percentile23rd percentile
Description

slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command, as demonstrated by openldap-initscript.

low : CVE--2015--3276

Affected range>=2.6.9+dfsg-1
Fixed versionNot Fixed
EPSS Score0.30%
EPSS Percentile70th percentile
Description

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

  • openldap (unimportant)
    Debian builds with GNUTLS, not NSS
critical: 0 high: 0 medium: 0 low: 3 unspecified: 1krb5 1.21.3-4 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2024--26461

Affected range>=1.21.3-4
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile12th percentile
Description

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.

low : CVE--2024--26458

Affected range>=1.21.3-4
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile12th percentile
Description

Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.

low : CVE--2018--5709

Affected range>=1.21.3-4
Fixed versionNot Fixed
EPSS Score0.09%
EPSS Percentile40th percentile
Description

An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assigned a "u4" variable to it, which is for 32-bit data. An attacker can use this vulnerability to affect other artifacts of the database as we know that a Kerberos database dump file contains trusted data.

unspecified : CVE--2025--24528

Affected range>=1.21.3-4
Fixed versionNot Fixed
Description
critical: 0 high: 0 medium: 0 low: 2 coreutils 9.5-1+b1 (deb)

pkg:deb/debian/[email protected]%2Bb1?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2017--18018

Affected range>=9.5-1
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile5th percentile
Description

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition.

low : CVE--2016--2781

Affected range>=9.5-1
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile5th percentile
Description

chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

critical: 0 high: 0 medium: 0 low: 2 sqlite3 3.46.1-1 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2023--36191

Affected range>=3.43.1-1
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile15th percentile
Description

sqlite3 v3.40.1 was discovered to contain a segmentation violation at /sqlite3_aflpp/shell.c.

REJECTED

low : CVE--2021--45346

Affected range>=3.46.1-1
Fixed versionNot Fixed
EPSS Score0.28%
EPSS Percentile69th percentile
Description

A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is possible to query a record, and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain sensitive information. NOTE: The developer disputes this as a vulnerability stating that If you give SQLite a corrupted database file and submit a query against the database, it might read parts of the database that you did not intend or expect.

critical: 0 high: 0 medium: 0 low: 1 gnutls28 3.8.9-2 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2011--3389

Affected range>=3.8.9-2
Fixed versionNot Fixed
EPSS Score1.43%
EPSS Percentile87th percentile
Description

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

critical: 0 high: 0 medium: 0 low: 1 openssl 3.4.1-1 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2010--0928

Affected range>=3.2.2-1
Fixed versionNot Fixed
EPSS Score0.07%
EPSS Percentile32nd percentile
Description

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation (FWE) algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to determine the private key via a modified supply voltage for the microprocessor, related to a "fault-based attack."

http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf
openssl/openssl#24540
Fault injection based attacks are not within OpenSSLs threat model according
to the security policy: https://www.openssl.org/policies/general/security-policy.html

critical: 0 high: 0 medium: 0 low: 1 perl 5.40.1-2 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2011--4116

Affected range>=5.40.1-2
Fixed versionNot Fixed
EPSS Score0.14%
EPSS Percentile52nd percentile
Description

_is_safe in the File::Temp module for Perl does not properly handle symlinks.

critical: 0 high: 0 medium: 0 low: 1 pam 1.7.0-3 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2024--10963

Affected range>=1.7.0-3
Fixed versionNot Fixed
EPSS Score0.04%
EPSS Percentile16th percentile
Description

A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.

critical: 0 high: 0 medium: 0 low: 1 util-linux 2.40.4-5 (deb)

pkg:deb/debian/[email protected]?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2022--0563

Affected range>=2.40.4-5
Fixed versionNot Fixed
EPSS Score0.05%
EPSS Percentile20th percentile
Description

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.

critical: 0 high: 0 medium: 0 low: 1 tar 1.35+dfsg-3.1 (deb)

pkg:deb/debian/[email protected]%2Bdfsg-3.1?os_distro=trixie&os_name=debian&os_version=unstable

low : CVE--2005--2541

Affected range>=1.35+dfsg-3.1
Fixed versionNot Fixed
EPSS Score0.69%
EPSS Percentile80th percentile
Description

Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users or remote attackers to gain privileges.

This is intended behaviour, after all tar is an archiving tool and you
need to give -p as a command line flag

mattmundell
mattmundell requested changes Mar 4, 2025
View reviewed changes
openvasd/openvasd.c
curl_slist_free_all (customheader);
if (response->code != RESP_CODE_ERR)
response->body = g_strdup (openvasd_vt_stream_str (conn));
else if (response->code == RESP_CODE_ERR)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You could drop the if and just have the else because the condition is always true.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, this is like this everywhere in this file. I'm happy to do them all as a PR.

openvasd/openvasd.h
{
int start; /**< Start interval. */
int end; /**< End interval. */
char *titles; /**< Graph title. */
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
char *titles; /**< Graph title. */
gchar *titles; /**< Graph title. */

openvasd/openvasd.c
"to scanner. Bad or missing parameters.\"}");
return response;
}
gchar *query =
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'd like to see more consistency with the declarations. All the others are at the top of the block, even for example hnd which is first used below this.

Personally I'd also like you to drop the excess inits in general. Like response is set to NULL then it's set again basically straight away.

openvasd/openvasd.c
CURL *hnd = NULL;
struct curl_slist *customheader = NULL;
time_t now;
time (&now);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
time (&now);
time (&now);

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mattmundell mattmundell mattmundell requested changes

Requested changes must be addressed to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jjnicola @mattmundell