diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt index 2a7bd6772a..f072df79e8 100644 --- a/.github/actions/spelling/allow.txt +++ b/.github/actions/spelling/allow.txt @@ -110,6 +110,7 @@ conventionalcommits copyleft coreinfrastructure coreutils +corosync cpanfile cpe cpio @@ -539,6 +540,7 @@ open openafs openblas opencv +openimageio openjpeg openldap opensc @@ -743,6 +745,7 @@ tor toybox tpm traceroute +traffic transmission triaging trousers @@ -849,4 +852,5 @@ zshrc zst zstandard zstd +zziplib diff --git a/README.md b/README.md index 2465fb0778..f1c95371a0 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: -1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 410 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. +1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 414 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. 2. Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats. @@ -226,66 +226,67 @@ The following checkers are available for finding components in binary files: | | | | Available checkers | | | | -|----------------- |--------------- |------------------ |------------- |---------------- |-------------- |--------------- | +|--------------- |--------------- |------------------ |----------- |---------------- |-------------- |-------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |apr |asn1c | | assimp |asterisk |atftp |augeas |avahi |axel |bash | | bind |binutils |bird |bison |bluez |boa |boinc | | botan |bro |bubblewrap |busybox |bwm_ng |bzip2 |c_ares | | cairo |capnproto |captive_portal |ceph |cflow |chess |chrony | | civetweb |clamav |clang |collectd |commons_compress |connman |coreutils | -| cpio |cpp_httplib |cronie |cryptsetup |cups |cups_filters |curl | -| cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils |dhclient | -| dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode |dnsmasq |docker | -| domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg |dropbear | -| e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs |exim | -| exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file |firefox | -| firejail |flac |fluidsynth |freeradius |freerdp |fribidi |frr | -| fuse |gawk |gcc |gdal |gdb |gdk_pixbuf |gettext | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gsasl |gstreamer |guile |gupnp |gvfs |gzip | -| haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell | -| hwloc |i2pd |icecast |icu |imagemagick |indent |inetutils | -| iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool |iwd | -| jack2 |jacksondatabind |janus |jasper |jbig |jhead |jq | -| json_c |kbd |keepalived |kerberos |kexectools |kodi |kubernetes | -| ldns |lftp |libarchive |libass |libbpg |libcap |libcoap | -| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | -| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | -| libjpeg |libjpeg_turbo |libksba |liblas |liblouis |libmatroska |libmemcached | -| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |libreoffice | -| libreswan |librsvg |librsync |libsamplerate |libseccomp |libsndfile |libsolv | -| libsoup |libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt | -| libupnp |libuv |libvips |libvirt |libvncserver |libvorbis |libvpx | -| libxslt |libyaml |libyang |lighttpd |linux_kernel |linuxptp |lldpd | -| llvm |logrotate |lrzip |lua |luajit |lxc |lynx | -| lz4 |lzo2 |mailx |mariadb |mbedtls |mdadm |memcached | -| micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd | -| moby |modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 | -| mpv |msmtp |mtr |mupdf |musl |mutt |mysql | -| nano |nasm |nbd |ncurses |neon |nessus |netatalk | -| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | -| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |ofono | -| open_iscsi |open_vm_tools |openafs |openblas |opencv |openjpeg |openldap | -| opensc |openssh |openssl |openswan |openvpn |openvswitch |orc | -| p7zip |pango |patch |pcre |pcre2 |pcsc_lite |perl | -| php |picocom |pigz |pixman |pjsip |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump |ruby | -| runc |rust |samba |sane_backends |sasl |sdl |seahorse | -| shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip |speex | -| spice |sqlite |squashfs |squid |sslh |stellarium |strongswan | -| stunnel |subversion |sudo |suricata |sylpheed |syslogng |sysstat | -| systemd |tar |tbb |tcpdump |tcpreplay |terminology |tesseract | -| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |toybox | -| tpm2_tss |traceroute |transmission |trousers |ttyd |twonky_server |u_boot | -| udisks |unbound |unixodbc |upx |util_linux |uwsgi |varnish | -| vim |vlc |vorbis_tools |vsftpd |wavpack |webkitgtk |wget | -| wireshark |wolfssl |wpa_supplicant |xerces |xml2 |xpdf |xscreensaver | -| xwayland |xz |yasm |zabbix |zbar |zchunk |zeek | -| zlib |znc |zsh |zstandard | | | | +| corosync |cpio |cpp_httplib |cronie |cryptsetup |cups |cups_filters | +| curl |cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils | +| dhclient |dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode |dnsmasq | +| docker |domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg | +| dropbear |e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs | +| exim |exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file | +| firefox |firejail |flac |fluidsynth |freeradius |freerdp |fribidi | +| frr |fuse |gawk |gcc |gdal |gdb |gdk_pixbuf | +| gettext |ghostscript |gimp |git |glib |glibc |gmp | +| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | +| grep |grub2 |gsasl |gstreamer |guile |gupnp |gvfs | +| gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd | +| hunspell |hwloc |i2pd |icecast |icu |imagemagick |indent | +| inetutils |iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool | +| iwd |jack2 |jacksondatabind |janus |jasper |jbig |jhead | +| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | +| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcap | +| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | +| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | +| libinput |libjpeg |libjpeg_turbo |libksba |liblas |liblouis |libmatroska | +| libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw | +| libreoffice |libreswan |librsvg |librsync |libsamplerate |libseccomp |libsndfile | +| libsolv |libsoup |libsrtp |libssh |libssh2 |libtasn1 |libtiff | +| libtomcrypt |libupnp |libuv |libvips |libvirt |libvncserver |libvorbis | +| libvpx |libxslt |libyaml |libyang |lighttpd |linux_kernel |linuxptp | +| lldpd |llvm |logrotate |lrzip |lua |luajit |lxc | +| lynx |lz4 |lzo2 |mailx |mariadb |mbedtls |mdadm | +| memcached |micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc | +| miniupnpd |moby |modsecurity |monit |mosquitto |motion |mp4v2 | +| mpg123 |mpv |msmtp |mtr |mupdf |musl |mutt | +| mysql |nano |nasm |nbd |ncurses |neon |nessus | +| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | +| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit | +| ofono |open_iscsi |open_vm_tools |openafs |openblas |opencv |openimageio | +| openjpeg |openldap |opensc |openssh |openssl |openswan |openvpn | +| openvswitch |orc |p7zip |pango |patch |pcre |pcre2 | +| pcsc_lite |perl |php |picocom |pigz |pixman |pjsip | +| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | +| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | +| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | +| rdesktop |readline |redis |rpm |rsync |rsyslog |rtl_433 | +| rtmpdump |ruby |runc |rust |samba |sane_backends |sasl | +| sdl |seahorse |shadowsocks_libev |snapd |sngrep |snort |socat | +| sofia_sip |speex |spice |sqlite |squashfs |squid |sslh | +| stellarium |strongswan |stunnel |subversion |sudo |suricata |sylpheed | +| syslogng |sysstat |systemd |tar |tbb |tcpdump |tcpreplay | +| terminology |tesseract |thrift |thttpd |thunderbird |timescaledb |tinyproxy | +| tor |toybox |tpm2_tss |traceroute |traffic_server |transmission |trousers | +| ttyd |twonky_server |u_boot |udisks |unbound |unixodbc |upx | +| util_linux |uwsgi |varnish |vim |vlc |vorbis_tools |vsftpd | +| wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces | +| xml2 |xpdf |xscreensaver |xwayland |xz |yasm |zabbix | +| zbar |zchunk |zeek |zlib |znc |zsh |zstandard | +| zziplib | | | | | | | All the checkers can be found in the checkers directory, as can the diff --git a/doc/MANUAL.md b/doc/MANUAL.md index 2eaffd1408..fc19de6e28 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -243,66 +243,67 @@ which is useful if you're trying the latest code from | | | | Available checkers | | | | -|----------------- |--------------- |------------------ |------------- |---------------- |-------------- |--------------- | +|--------------- |--------------- |------------------ |----------- |---------------- |-------------- |-------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |apr |asn1c | | assimp |asterisk |atftp |augeas |avahi |axel |bash | | bind |binutils |bird |bison |bluez |boa |boinc | | botan |bro |bubblewrap |busybox |bwm_ng |bzip2 |c_ares | | cairo |capnproto |captive_portal |ceph |cflow |chess |chrony | | civetweb |clamav |clang |collectd |commons_compress |connman |coreutils | -| cpio |cpp_httplib |cronie |cryptsetup |cups |cups_filters |curl | -| cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils |dhclient | -| dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode |dnsmasq |docker | -| domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg |dropbear | -| e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs |exim | -| exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file |firefox | -| firejail |flac |fluidsynth |freeradius |freerdp |fribidi |frr | -| fuse |gawk |gcc |gdal |gdb |gdk_pixbuf |gettext | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gsasl |gstreamer |guile |gupnp |gvfs |gzip | -| haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd |hunspell | -| hwloc |i2pd |icecast |icu |imagemagick |indent |inetutils | -| iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool |iwd | -| jack2 |jacksondatabind |janus |jasper |jbig |jhead |jq | -| json_c |kbd |keepalived |kerberos |kexectools |kodi |kubernetes | -| ldns |lftp |libarchive |libass |libbpg |libcap |libcoap | -| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | -| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | -| libjpeg |libjpeg_turbo |libksba |liblas |liblouis |libmatroska |libmemcached | -| libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw |libreoffice | -| libreswan |librsvg |librsync |libsamplerate |libseccomp |libsndfile |libsolv | -| libsoup |libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt | -| libupnp |libuv |libvips |libvirt |libvncserver |libvorbis |libvpx | -| libxslt |libyaml |libyang |lighttpd |linux_kernel |linuxptp |lldpd | -| llvm |logrotate |lrzip |lua |luajit |lxc |lynx | -| lz4 |lzo2 |mailx |mariadb |mbedtls |mdadm |memcached | -| micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd | -| moby |modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 | -| mpv |msmtp |mtr |mupdf |musl |mutt |mysql | -| nano |nasm |nbd |ncurses |neon |nessus |netatalk | -| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | -| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |ofono | -| open_iscsi |open_vm_tools |openafs |openblas |opencv |openjpeg |openldap | -| opensc |openssh |openssl |openswan |openvpn |openvswitch |orc | -| p7zip |pango |patch |pcre |pcre2 |pcsc_lite |perl | -| php |picocom |pigz |pixman |pjsip |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump |ruby | -| runc |rust |samba |sane_backends |sasl |sdl |seahorse | -| shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip |speex | -| spice |sqlite |squashfs |squid |sslh |stellarium |strongswan | -| stunnel |subversion |sudo |suricata |sylpheed |syslogng |sysstat | -| systemd |tar |tbb |tcpdump |tcpreplay |terminology |tesseract | -| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |toybox | -| tpm2_tss |traceroute |transmission |trousers |ttyd |twonky_server |u_boot | -| udisks |unbound |unixodbc |upx |util_linux |uwsgi |varnish | -| vim |vlc |vorbis_tools |vsftpd |wavpack |webkitgtk |wget | -| wireshark |wolfssl |wpa_supplicant |xerces |xml2 |xpdf |xscreensaver | -| xwayland |xz |yasm |zabbix |zbar |zchunk |zeek | -| zlib |znc |zsh |zstandard | | | | +| corosync |cpio |cpp_httplib |cronie |cryptsetup |cups |cups_filters | +| curl |cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils | +| dhclient |dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode |dnsmasq | +| docker |domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg | +| dropbear |e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs | +| exim |exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file | +| firefox |firejail |flac |fluidsynth |freeradius |freerdp |fribidi | +| frr |fuse |gawk |gcc |gdal |gdb |gdk_pixbuf | +| gettext |ghostscript |gimp |git |glib |glibc |gmp | +| gnomeshell |gnupg |gnutls |go |gpgme |gpsd |graphicsmagick | +| grep |grub2 |gsasl |gstreamer |guile |gupnp |gvfs | +| gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd | +| hunspell |hwloc |i2pd |icecast |icu |imagemagick |indent | +| inetutils |iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool | +| iwd |jack2 |jacksondatabind |janus |jasper |jbig |jhead | +| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | +| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcap | +| libcoap |libconfuse |libcurl |libdb |libde265 |libebml |libevent | +| libexpat |libgcrypt |libgd |libgit2 |libheif |libical |libidn2 | +| libinput |libjpeg |libjpeg_turbo |libksba |liblas |liblouis |libmatroska | +| libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt |libpcap |libraw | +| libreoffice |libreswan |librsvg |librsync |libsamplerate |libseccomp |libsndfile | +| libsolv |libsoup |libsrtp |libssh |libssh2 |libtasn1 |libtiff | +| libtomcrypt |libupnp |libuv |libvips |libvirt |libvncserver |libvorbis | +| libvpx |libxslt |libyaml |libyang |lighttpd |linux_kernel |linuxptp | +| lldpd |llvm |logrotate |lrzip |lua |luajit |lxc | +| lynx |lz4 |lzo2 |mailx |mariadb |mbedtls |mdadm | +| memcached |micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc | +| miniupnpd |moby |modsecurity |monit |mosquitto |motion |mp4v2 | +| mpg123 |mpv |msmtp |mtr |mupdf |musl |mutt | +| mysql |nano |nasm |nbd |ncurses |neon |nessus | +| netatalk |netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx | +| ngircd |nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit | +| ofono |open_iscsi |open_vm_tools |openafs |openblas |opencv |openimageio | +| openjpeg |openldap |opensc |openssh |openssl |openswan |openvpn | +| openvswitch |orc |p7zip |pango |patch |pcre |pcre2 | +| pcsc_lite |perl |php |picocom |pigz |pixman |pjsip | +| png |polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng | +| proftpd |protobuf_c |pspp |pure_ftpd |putty |python |qemu | +| qpdf |qt |quagga |radare2 |radvd |raptor |rauc | +| rdesktop |readline |redis |rpm |rsync |rsyslog |rtl_433 | +| rtmpdump |ruby |runc |rust |samba |sane_backends |sasl | +| sdl |seahorse |shadowsocks_libev |snapd |sngrep |snort |socat | +| sofia_sip |speex |spice |sqlite |squashfs |squid |sslh | +| stellarium |strongswan |stunnel |subversion |sudo |suricata |sylpheed | +| syslogng |sysstat |systemd |tar |tbb |tcpdump |tcpreplay | +| terminology |tesseract |thrift |thttpd |thunderbird |timescaledb |tinyproxy | +| tor |toybox |tpm2_tss |traceroute |traffic_server |transmission |trousers | +| ttyd |twonky_server |u_boot |udisks |unbound |unixodbc |upx | +| util_linux |uwsgi |varnish |vim |vlc |vorbis_tools |vsftpd | +| wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces | +| xml2 |xpdf |xscreensaver |xwayland |xz |yasm |zabbix | +| zbar |zchunk |zeek |zlib |znc |zsh |zstandard | +| zziplib | | | | | | | For a quick overview of usage and how it works, you can also see [the readme file](README.md).