fix: parse CPE names correctly #4041

Signed-off-by: fthdrmzzz <[email protected]>
intel · Apr 20, 2024 · 292479d · 292479d
1 parent 8610ceb
commit 292479d
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/cve_bin_tool/data_sources/nvd_source.py b/cve_bin_tool/data_sources/nvd_source.py
@@ -183,7 +183,8 @@ def parse_node(self, node: dict[str, list[dict[str, str]]]) -> list[dict[str, st
         if "cpe_match" in node:
             vulnerable_matches = (m for m in node["cpe_match"] if m["vulnerable"])
             for cpe_match in vulnerable_matches:
-                cpe_split = cpe_match["cpe23Uri"].split(":")
+                cpe_uri = cpe_match["cpe23Uri"]
+                cpe_split = re.split(r"(?<!\\):", cpe_uri)
                 affects = {
                     "vendor": cpe_split[3],
                     "product": cpe_split[4],
@@ -290,7 +291,8 @@ def parse_node_api2(
         if "cpeMatch" in node:
             vulnerable_matches = (m for m in node["cpeMatch"] if m["vulnerable"])
             for cpe_match in vulnerable_matches:
-                cpe_split = cpe_match["criteria"].split(":")
+                cpe_criteria = cpe_match["criteria"]
+                cpe_split = re.split(r"(?<!\\):", cpe_criteria)
                 affects = {
                     "vendor": cpe_split[3],
                     "product": cpe_split[4],