package mondoo.mvd.v1

Get desktop application:
View/edit binary Protocol Buffers messages

Implements the AdvisoryScanner interface from cnquery

• rpc AnalyseAsset (AnalyseAssetRequest, VulnReport)

  mvd.proto:42

  Scans a list of packages for vulnerabilities

  message AnalyseAssetRequest

  mvd.proto:49

  • optional Platform platform = 1

  • repeated Package packages = 2

  • string kernelVersion = 3

    protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

  message VulnReport

  mvd.proto:56

  • optional Platform platform = 1

  • repeated Package packages = 2

  • repeated Advisory advisories = 3

  • optional ReportStats stats = 4

  • string published = 5

• rpc IsEol (Platform, PlatformEolInfo)

  mvd.proto:44

  Get information about the end of life of a platform

  message PlatformEolInfo

  mvd.proto:204

  • optional Platform platform = 1

  • string DocsUrl = 2

    protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

  • string ProductUrl = 3

    protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

  • string ReleaseDate = 4

    protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

  • string EolDate = 5

    protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• rpc GetProductEol (GetProductEolRequest, GetProductEolResponse)

  mvd.proto:46

  Get information about the end of life of a product

  message GetProductEolRequest

  mvd.proto:217

  GetProductEolRequest contains information about the product and the version

  • string name = 1

    Product ID eg. kubernetes

  • string version = 2

    Product version

  message GetProductEolResponse

  mvd.proto:226

  GetProductEolResponse contains information about the end of life of a product release

  • optional EndOfLifeRelease release = 1

    Release information

Used in: VulnReport

• string ID = 1

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string Mrn = 2

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string title = 3

• string description = 4

• repeated Package fixed = 5

  protolint:disable:next REPEATED_FIELD_NAMES_PLURALIZED

• repeated Package affected = 6

  protolint:disable:next REPEATED_FIELD_NAMES_PLURALIZED

• repeated Reference refs = 7

• repeated CVE cves = 20

• repeated FixedPlatform fixedPlatforms = 30

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• int32 score = 25

• optional cvss.v1.Cvss worstScore = 31

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• float vendorscore = 26

• AdvisoryState state = 27

• string published = 23

• string modified = 24

• repeated string supersedence = 28

  protolint:disable:next REPEATED_FIELD_NAMES_PLURALIZED

• bool unscored = 29

protolint:disable ENUM_FIELD_NAMES_PREFIX

Used in: Advisory

• RELEASED = 0

  protolint:disable ENUM_FIELD_NAMES_ZERO_VALUE_END_WITH

• PENDING = 1

• IGNORED = 2

• NOT_AFFECTED = 3

Used in: Advisory

• string ID = 1

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string Mrn = 2

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string summary = 3

• float score = 4

• optional cvss.v1.Cvss worstScore = 7

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• bool unscored = 6

• CveState state = 5

• repeated cvss.v1.Cvss cvss = 20

  protolint:disable:next REPEATED_FIELD_NAMES_PLURALIZED

• string cwe = 21

• string published = 22

• string modified = 23

• string url = 24

protolint:disable:next ENUM_FIELD_NAMES_PREFIX

Used in: CVE

• PUBLIC = 0

  protolint:disable:next ENUM_FIELD_NAMES_ZERO_VALUE_END_WITH

• INVALID = 1

• RESERVED = 2

• REPLACED_BY = 4

• SPLIT_FROM = 5

• MERGED_TO = 6

• REJECTED = 7

EndOfLifeRelease contains information about the end of life of a release

Used in: GetProductEolResponse

• string release_name = 1

  Release Name eg. Ubuntu

• string release_codename = 2

  Release Codename eg. Focal Fossa

• string release_cycle = 3

  Release Cycle eg. major version

• string latest_version = 4

  Latest version in the release cycle

• optional google.protobuf.Timestamp first_release_date = 5

  First Release Date

• optional google.protobuf.Timestamp last_release_date = 6

  Last Release Date

• string release_link = 7

  Link to the release

• optional google.protobuf.Timestamp end_of_active_support = 8

  End Of Active Support

• optional google.protobuf.Timestamp end_of_life = 9

  End Of Life

• optional google.protobuf.Timestamp end_of_extended_support = 10

  End Of Extended Support

• string change_log_reference = 11

  Change Log Reference

Used in: Advisory

• string ID = 6

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string name = 1

• string release = 2

• string arch = 3

• string namespace = 4

• string build = 5

• string patchName = 7

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

Used in: Advisory, AnalyseAssetRequest, VulnReport

• string ID = 6

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string name = 1

• string version = 2

• string arch = 5

• string description = 20

• string format = 23

• string origin = 24

• string available = 22

• string status = 21

• string namespace = 25

• int32 score = 26

• bool affected = 27

Used as request type in: AdvisoryScanner.IsEol

Used as field type in: AnalyseAssetRequest, PlatformEolInfo, VulnReport

• string name = 1

• string release = 2

• string arch = 3

• string title = 4

• string build = 6

• map<string, string> labels = 22

Used in: Advisory

• string ID = 1

  protolint:disable:next FIELD_NAMES_LOWER_SNAKE_CASE

• string url = 2

• string source = 3

• string title = 4

Used in: VulnReport

• int32 score = 1

• bool affected = 2

• bool unscored = 3

• optional ReportStatsAdvisories advisories = 16

• optional ReportStatsCves cves = 17

• optional ReportStatsPackages packages = 18

• optional ReportStatsExploits exploits = 19

Used in: ReportStats

• int32 total = 1

• int32 critical = 2

• int32 high = 3

• int32 medium = 4

• int32 low = 5

• int32 none = 6

• int32 unknown = 7

Used in: ReportStats

• int32 total = 1

• int32 critical = 2

• int32 high = 3

• int32 medium = 4

• int32 low = 5

• int32 none = 6

• int32 unknown = 7

Used in: ReportStats

• int32 total = 1

Used in: ReportStats

• int32 total = 1

• int32 affected = 2

• int32 critical = 3

• int32 high = 4

• int32 medium = 5

• int32 low = 6

• int32 none = 7

• int32 unknown = 8