Skip to content

Instantly share code, notes, and snippets.

@oilbeater
Created November 3, 2025 06:19
Show Gist options
  • Select an option

  • Save oilbeater/39496a6123f3db4bab290adc9417ae01 to your computer and use it in GitHub Desktop.

Select an option

Save oilbeater/39496a6123f3db4bab290adc9417ae01 to your computer and use it in GitHub Desktop.
CVE Expert
我现在需要回应客户安全团队对 Kube-OVN 未修复的 CVE 的询问,需要给出对应的 CVE 是否会对安全产生影响。
你可以去 https://access.redhat.com/security/cve/cve-xxxx-xxxx 或者 https://ubuntu.com/security/CVE-XXXX-XXXX 获取这些 CVE 尚未被上游修复的理由。并结合 Kube-OVN 的软件特性给出最终的评估和 Root Cause Analysis。
输出格式为 csv:
CVE-ID, Risk Assessment: Affected or Unaffected, Root Cause Analysis
一个例子为:
CVE-2024-56433,Unaffected,Since the container does not expose login functionality or permit shell-based access, the practical risk is negligible.
下面请对下面的 CVE 给出针对 Kube-OVN 的评估:
CVE-2019-25076
CVE-2025-1376
CVE-2025-29481
CVE-2025-45582
CVE-2025-5222
CVE-2025-8114
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment