Warning message in ossec.log related to Vulnerability Detector - Demo environment

[mauromalara]

Wazuh version	Install type	Action performed	Platform
4.3.6	Manager	Installation	Amazon Linux release 2

Description

The following warning message appears in the logs of the master node in the demo environment. The agent with ID 001 is a Debian Agent and the message appears every 5 minutes in the log.

[root@wazuh-manager-master-0 wazuh-user]# egrep -i "ERROR|WARNING" /var/ossec/logs/ossec.log
2022/07/18 16:58:24 wazuh-modulesd:vulnerability-detector: WARNING: (5575): Unavailable vulnerability data for the agent '001' OS. Skipping it.

[mauromalara]

Bad report

The support for Debian finished on June 30, 2022. So, the feeds are no longer available, and Wazuh cannot scan the agent as there are no vulnerabilities.

Verification:

OS info:

PRETTY_NAME="Debian GNU/Linux 9 (stretch)"
NAME="Debian GNU/Linux"
VERSION_ID="9"
VERSION="9 (stretch)"
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"

Search for vulnerabilities:

# sqlite3 /var/ossec/queue/vulnerabilities/cve.db "select target,count (*) from VULNERABILITIES group by TARGET;"
ARCH|8175
Amazon-Linux|48349
Amazon-Linux-2|22681
BIONIC|42657
BUSTER|26690
FOCAL|30381
RHEL5|24936
RHEL6|78981
RHEL7|92261
RHEL8|87090
TRUSTY|49736
XENIAL|42428

As you can see, stretch does not appears in the list. So, the warning message is correct.