[ig1]

It looks like Privdog which was bundled with CIS didn't have the vulnerability (it was an older version of Privdog) but if you downloaded it from the website you would have had the new version (Privdog v3 or later) which would have had the vuln.

If you're running the version of Privdog which came with CIS could you check the version of Privdog ?

Badfish shouldn't have failed for you with the bundled version, but if it did that's probably something that needs to be looked at more deeply.