How to run CVE checker on yocto image for iM6SX

[pranavmondhe14]

Hi Guys

We are using customized yocto linux kernel and running some C++ code for industrial application.

Where i can find CVE (Common Vulnurabilites and Exposures) tools to check for my custom-ed yocto image.

I need to address if i have any issues of packages if any by running CVE for my image

I dont know much about yocto build project, I don't have build environment with me, i just want to run on image previously given to me by a vendor on the sabre board running yocto image

Below are image details:

Booting Linux on physical CPU 0x0
Linux version 3.14.28-1.0.0_ga+g91cf351 (bytesnap@manifests2) (gcc version 5.4.0 (GCC) ) #1 SMP PREE
CPU: ARMv7 Processor [412fc09a] revision 10 (ARMv7), cr=10c53c7d

Best Regards

Pranav Mondhe

[pranavmondhe14]

HI have found below cve check tool that will identify potentially vunlnerable software packages within Linux distributions through version matching.

https://github.com/clearlinux/cve-check-tool

I have no idea how to run this on my sabre board.

Please anyone can guide me how to run above tool ?

Best Regards

Pranav