OpenVas扫描器更新扫描引擎

OPenVAS在首次使用rsync升级时可能出现同步失败,导致扫描模块和规则不更新,影响扫描准确性。文章提到的解决方案是尝试使用wget或curl代替默认的rsync方法进行升级,以确保扫描引擎和环境为最新版本,避免扫描覆盖率下降或漏洞检测缺失。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

OPenvas扫描器安装时step1 是交换指导升级(nvt,cert,scap),这次升级后是自动升级24h升级一次,但第一次升级时选择默认的rsync升级时会出现同步失败的问题,导致openvas安装完后有很大模块和规则不是最新的从而会影响扫描结果。

问题:
如过选择默认的rsync升级,最后失败了。扫描结束会有这样的告警(告诉扫描者应该升级本地扫描引擎,版本低可能会影响扫描结果)
Report outdated / end-of-life Scan Engine / Environment (local)
Summary
This script checks and reports an outdated or end-of-life scan engine
for the following environments:

  • Greenbone Source Edition (GSE)

  • Greenbone Community Edition (GCE)

used for this scan.

NOTE: While this is not, in and of itself, a security vulnerability, a severity is reported to make you aware
of a possible decreased scan coverage or missing detection of vulnerabilities on the target due to e.g.:

  • missing functionalities

  • missing bugfixes

  • incompatibilities within the feed.
    Detection Result
    Installed GVM Libraries (gvm-libs) version: 10.0.0
    Latest available GVM Libraries (gvm-libs) version: 10.0.2
    Reference URL(s) for the latest available version: https://community.greenbone.net/t/gvm-11-stable-initial-release-2019-10-14/3674 / https://community.greenbone.net/t/gvm-10-old-stable-initial-release-2019-04-05/208
    Detection Method
    Details:
    Report outdated / end-of-life Scan Engine / Environment (local) OID: 1.3.6.1.4.1.25623.1.0.108560
    Version used:
    2020-06-10T13:24:20Z
    Solution
    Solution Type:
    Vendorfix
    Update to the latest available stable release for your scan environment. Please check the
    references for more information. If you’re using packages provided by your Linux distribution please contact the maintainer
    of the used distribution / repository and request updated packages.

If you want to accept the risk of a possible decreased scan coverage or missing detection of vulnerabilities on the target you
can set a global override for this script as described in the linked manuals.

解决办法:按report中提示点击下载升级包、点击无反应。
我们openvas-setup 开始在设置一边openvas,这次别用默认的rsync,用wget 或者curl方法。

获取最新规则引擎

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值