Meltdown/Spectre report for Linux and ESX?

[stractenberg]

Can someone please generate a Spectre/Meltdown vulnerability report for Linux and ESXi systems? Thanks!

[Bruce_B]

Built-in views such as the variable devicetype report are stored in the table tsysDBobjects in the Lansweeper database. The highlighted text needs to be modified to an actual asset type, as the view uses a variable, which won't work in the report builder.


SELECT tblAssets.AssetID, tsysAssetTypes.AssetTypeIcon10 AS Icon, tblAssets.AssetName, tsysAssetTypes.AssetTypename AS Type, tblAssetCustom.State AS Thestate, tblAssets.Domain, tblAssets.IPAddress AS [IP Address],
tblAssets.Description, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tblAssetCustom.Location, tsysIPLocations.IPLocation, tblAssets.Firstseen, tblAssets.Lastseen, case when (tblassets.assettype = -1 and
COALESCE (tblassets.OSCODE, '') = '') then 'red' else 'black' end as foregroundcolor FROM tblAssetCustom
INNER JOIN tblAssets ON tblAssetCustom.AssetID = tblAssets.AssetID
LEFT OUTER JOIN tsysIPLocations ON tblAssets.LocationID = tsysIPLocations.LocationID
INNER JOIN tsysAssetTypes ON tblAssets.Assettype = tsysAssetTypes.AssetType
WHERE (tblAssets.Assettype = @devicetype) and (tblAssetCustom.State = 1)
ORDER BY tblAssets.AssetName

[CVCO]

is there a way to get the report code for the built in "All Linux assets" /report.aspx?det=Web50getdevicebytype&title=All Linux assets&@devicetype=11 report? This is the one generated when a Linux icon link is clicked from an asset page and I'd like to use code from that report to build on and expand the partial results returned by the example in our case.

[Bruce_B]

We received this question via email as well, I've posted my reply below for everyone else's benefit:

We did consider adding reports for other asset types such as VMware and Linux, unfortunately it's impractical to create a unified report to cover the entirety of all Linux assets, as the patched kernel version required will vary very greatly depending on which OS release and version is being used. There are too many divergences in Linux assets to create a "one size fits all" report. As such a report would need to be tailored for every environment.

For VMware a similar issue exists, where the VMware OS build could indicate vulnerability or non-vulnerability. Unfortunately, there are quite a large number of builds out there for each ESXi version, VMware proper builds, and OEM builds such as Dell, HP, etc. with this OEM builds using different build numbering.

That said, we did add 2 reports below that will list the relevant data for VMware and Linux assets, which can aid you in your research for determining which assets require further attention.

Linux:

Select Distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Processor,
tblLinuxSystem.OperatingSystem,
tblLinuxSystem.OSRelease,
tblSoftwareUni.softwareName,
tblLinuxSoftware.Version As KernelVersion,
tblLinuxSoftware.Release As KernelRelease,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Inner Join tblLinuxSoftware On tblAssets.AssetID = tblLinuxSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblLinuxSoftware.SoftwareUniID
Where tblSoftwareUni.softwareName = 'Kernel' And tblAssetCustom.State = 1

VMware:

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblVmwareInfo.Version,
tblAssets.Processor,
tblVmwareInfo.BiosVersion,
tblVmwareInfo.BiosDate,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tblVmwareInfo On tblAssets.AssetID = tblVmwareInfo.AssetID
Where tblAssetCustom.State = 1
Order By tblAssets.AssetName