[Openvas-plugins] Meltdown & Spectre vulnerability plugins

[Al-Dhalaan, Abdul]

Hello,

Quick question, what’s the current state of scanning for Meltdown and Spectre in Openvas? Do we have plugins with a reliable detection rate for both Linux and windows based operating systems?

On a related note, I’ve been getting refused connections when attempting to search for plugins in http://plugins.openvas.org

Thanks,
Abdul

[Christian Fischer]

Hi,

Quick question, what’s the current state of scanning for Meltdown and Spectre in Openvas? Do we have plugins with a reliable detection rate for both Linux and windows based operating systems?

you can always go to SecInfo -> NVTs in your GSA or to [1] and input the
following CVEs into the filter to get a state of the Meltdown / Spectre
NVTs in your current feed version:

CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

After the next update of the community feed you should get around 47
NVTs/LSCs handling those vulnerabilities. More NVTs/LSCs are added based
on the publishing time of vendor advisories.

Regards,

[1] https://secinfo.greenbone.net/omp?r=1&token=guest