diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt index 4161a88b03..b62d457c38 100644 --- a/.github/actions/spelling/allow.txt +++ b/.github/actions/spelling/allow.txt @@ -33,6 +33,7 @@ autoextract autoextracts avahi axel +babel backend backends backport @@ -190,12 +191,14 @@ entrypoint epss EPSS Eqt +erlang Everyone everytime evp exe executables exfatprogs +exiftags exim exiv expat @@ -569,6 +572,7 @@ opkg orc ossl osv +otp p pacman palletsprojects @@ -845,6 +849,7 @@ Xiph xkcd xml xpdf +xrdp xscreensaver xvf xwayland diff --git a/README.md b/README.md index 91bd126e04..5607a0cd1d 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: -1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 428 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. +1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 432 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. 2. Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats. @@ -226,7 +226,7 @@ The following checkers are available for finding components in binary files: | | | | Available checkers | | | | -|----------------- |------------ |------------ |------------------ |------------- |-------------- |--------------- | +|---------------- |-------------- |------------- |------------------ |------------ |--------------- |-------------- | | accountsservice |acpid |aomedia |apache_http_server |apcupsd |apparmor |apr | | asn1c |assimp |asterisk |atftp |augeas |avahi |axel | | bash |bind |binutils |bird |bison |bluez |boa | @@ -238,57 +238,57 @@ The following checkers are available for finding components in binary files: | davfs2 |dbus |dcmtk |debianutils |dhclient |dhcpcd |dhcpd | | djvulibre |dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools | | dotnet |dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed | -| elfutils |emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools | -| faad2 |fastd |fastnetmon |ffmpeg |file |firefox |firejail | -| fish |flac |fluidsynth |freeradius |freerdp |fribidi |frr | -| fuse |gawk |gcc |gdal |gdb |gdk_pixbuf |gettext | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gsasl |gsl |gstreamer |guile |gupnp |gvfs | -| gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd | -| hunspell |hwloc |i2pd |icecast |icu |imagemagick |indent | -| inetutils |iperf3 |ipmitool |ipsec_tools |iptables |iputils |irssi | -| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jbig | -| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | -| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | -| libcap |libcoap |libconfuse |libcurl |libdb |libde265 |libebml | -| libevent |libexpat |libgcrypt |libgd |libgit2 |libheif |libhtp | -| libical |libidn2 |libinput |libjpeg |libjpeg_turbo |libksba |liblas | -| liblouis |libmatroska |libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt | -| libpcap |libraw |libreoffice |libreswan |librsvg |librsync |libsamplerate | -| libseccomp |libsixel |libsndfile |libsolv |libsoup |libsrtp |libssh | -| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | -| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |libyang | -| lighttpd |linux_kernel |linuxptp |lldpd |llvm |logrotate |lrzip | -| lua |luajit |lxc |lynx |lz4 |lzo2 |mailx | -| mariadb |mbedtls |mdadm |memcached |micropython |minetest |mini_httpd | -| minicom |minidlna |miniupnpc |miniupnpd |moby |modsecurity |monit | -| mosquitto |motion |mp4v2 |mpd |mpg123 |mpv |msmtp | -| mtr |mupdf |musl |mutt |mysql |nano |nasm | -| nbd |ncurses |neon |nessus |netatalk |netdata |netkit_ftp | -| netpbm |nettle |nghttp2 |nginx |ngircd |nmap |node | -| ntfs_3g |ntp |ntpsec |oath_toolkit |ofono |open_iscsi |open_vm_tools | -| openafs |openblas |opencv |openimageio |openjpeg |openldap |openocd | -| opensc |openssh |openssl |openswan |openvpn |openvswitch |orc | -| p7zip |pango |patch |pcre |pcre2 |pcsc_lite |perl | -| php |picocom |pigz |pixman |pjsip |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump |ruby | -| runc |rust |samba |sane_backends |sasl |sdl |seahorse | -| shadowsocks_libev |snapcast |snapd |sngrep |snort |socat |sofia_sip | -| speex |spice |sqlite |squashfs |squid |sslh |stellarium | -| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | -| sysstat |systemd |tar |tbb |tcpdump |tcpreplay |terminology | -| tesseract |thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor | -| toybox |tpm2_tss |traceroute |traffic_server |transmission |trousers |ttyd | -| twonky_server |u_boot |udisks |unbound |unixodbc |upx |util_linux | -| uwsgi |varnish |vim |vlc |vorbis_tools |vsftpd |wabt | -| wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces | -| xml2 |xpdf |xscreensaver |xwayland |xz |yasm |zabbix | -| zbar |zchunk |zeek |zlib |znc |zsh |zstandard | -| zziplib | | | | | | | +| elfutils |emacs |enscript |erlang_otp |exfatprogs |exiftags |exim | +| exiv2 |f2fs_tools |faad2 |fastd |fastnetmon |ffmpeg |file | +| firefox |firejail |fish |flac |fluidsynth |freeradius |freerdp | +| fribidi |frr |fuse |gawk |gcc |gdal |gdb | +| gdk_pixbuf |gettext |ghostscript |gimp |git |glib |glibc | +| gmp |gnomeshell |gnupg |gnutls |go |gpgme |gpsd | +| graphicsmagick |grep |grub2 |gsasl |gsl |gstreamer |guile | +| gupnp |gvfs |gzip |haproxy |harfbuzz |haserl |hdf5 | +| heimdal |hostapd |hunspell |hwloc |i2pd |icecast |icu | +| imagemagick |indent |inetutils |iperf3 |ipmitool |ipsec_tools |iptables | +| iputils |irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus | +| jasper |jbig |jhead |jq |json_c |kbd |keepalived | +| kerberos |kexectools |kodi |kubernetes |ldns |lftp |libarchive | +| libass |libbpg |libcap |libcoap |libconfuse |libcurl |libdb | +| libde265 |libebml |libevent |libexpat |libgcrypt |libgd |libgit2 | +| libheif |libhtp |libical |libidn2 |libinput |libjpeg |libjpeg_turbo | +| libksba |liblas |liblouis |libmatroska |libmemcached |libmicrohttpd |libmodbus | +| libnss |libopenmpt |libpcap |libraw |libreoffice |libreswan |librsvg | +| librsync |libsamplerate |libseccomp |libsixel |libsndfile |libsolv |libsoup | +| libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp | +| libuv |libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt | +| libyaml |libyang |lighttpd |linux_kernel |linuxptp |lldpd |llvm | +| logrotate |lrzip |lua |luajit |lxc |lynx |lz4 | +| lzo2 |mailx |mariadb |mbedtls |mdadm |memcached |micropython | +| minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd |moby | +| modsecurity |monit |mosquitto |motion |mp4v2 |mpd |mpg123 | +| mpv |msmtp |mtr |mupdf |musl |mutt |mysql | +| nano |nasm |nbd |ncurses |neon |nessus |netatalk | +| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | +| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |ofono | +| open_babel |open_iscsi |open_vm_tools |openafs |openblas |opencv |openimageio | +| openjpeg |openldap |openocd |opensc |openssh |openssl |openswan | +| openvpn |openvswitch |orc |p7zip |pango |patch |pcre | +| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | +| pjsip |png |polarssl |poppler |postgresql |ppp |privoxy | +| procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty |python | +| qemu |qpdf |qt |quagga |radare2 |radvd |raptor | +| rauc |rdesktop |readline |redis |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |ruby |runc |rust |samba |sane_backends | +| sasl |sdl |seahorse |shadowsocks_libev |snapcast |snapd |sngrep | +| snort |socat |sofia_sip |speex |spice |sqlite |squashfs | +| squid |sslh |stellarium |strongswan |stunnel |subversion |sudo | +| suricata |sylpheed |syslogng |sysstat |systemd |tar |tbb | +| tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd |thunderbird | +| timescaledb |tinyproxy |tor |toybox |tpm2_tss |traceroute |traffic_server | +| transmission |trousers |ttyd |twonky_server |u_boot |udisks |unbound | +| unixodbc |upx |util_linux |uwsgi |varnish |vim |vlc | +| vorbis_tools |vsftpd |wabt |wavpack |webkitgtk |wget |wireshark | +| wolfssl |wpa_supplicant |xerces |xml2 |xpdf |xrdp |xscreensaver | +| xwayland |xz |yasm |zabbix |zbar |zchunk |zeek | +| zlib |znc |zsh |zstandard |zziplib | | | All the checkers can be found in the checkers directory, as can the diff --git a/doc/MANUAL.md b/doc/MANUAL.md index cd5c8c6010..432866a73b 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -243,7 +243,7 @@ which is useful if you're trying the latest code from | | | | Available checkers | | | | -|----------------- |------------ |------------ |------------------ |------------- |-------------- |--------------- | +|---------------- |-------------- |------------- |------------------ |------------ |--------------- |-------------- | | accountsservice |acpid |aomedia |apache_http_server |apcupsd |apparmor |apr | | asn1c |assimp |asterisk |atftp |augeas |avahi |axel | | bash |bind |binutils |bird |bison |bluez |boa | @@ -255,57 +255,57 @@ which is useful if you're trying the latest code from | davfs2 |dbus |dcmtk |debianutils |dhclient |dhcpcd |dhcpd | | djvulibre |dlt_daemon |dmidecode |dnsmasq |docker |domoticz |dosfstools | | dotnet |dovecot |doxygen |dpkg |dropbear |e2fsprogs |ed | -| elfutils |emacs |enscript |exfatprogs |exim |exiv2 |f2fs_tools | -| faad2 |fastd |fastnetmon |ffmpeg |file |firefox |firejail | -| fish |flac |fluidsynth |freeradius |freerdp |fribidi |frr | -| fuse |gawk |gcc |gdal |gdb |gdk_pixbuf |gettext | -| ghostscript |gimp |git |glib |glibc |gmp |gnomeshell | -| gnupg |gnutls |go |gpgme |gpsd |graphicsmagick |grep | -| grub2 |gsasl |gsl |gstreamer |guile |gupnp |gvfs | -| gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal |hostapd | -| hunspell |hwloc |i2pd |icecast |icu |imagemagick |indent | -| inetutils |iperf3 |ipmitool |ipsec_tools |iptables |iputils |irssi | -| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jbig | -| jhead |jq |json_c |kbd |keepalived |kerberos |kexectools | -| kodi |kubernetes |ldns |lftp |libarchive |libass |libbpg | -| libcap |libcoap |libconfuse |libcurl |libdb |libde265 |libebml | -| libevent |libexpat |libgcrypt |libgd |libgit2 |libheif |libhtp | -| libical |libidn2 |libinput |libjpeg |libjpeg_turbo |libksba |liblas | -| liblouis |libmatroska |libmemcached |libmicrohttpd |libmodbus |libnss |libopenmpt | -| libpcap |libraw |libreoffice |libreswan |librsvg |librsync |libsamplerate | -| libseccomp |libsixel |libsndfile |libsolv |libsoup |libsrtp |libssh | -| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | -| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |libyang | -| lighttpd |linux_kernel |linuxptp |lldpd |llvm |logrotate |lrzip | -| lua |luajit |lxc |lynx |lz4 |lzo2 |mailx | -| mariadb |mbedtls |mdadm |memcached |micropython |minetest |mini_httpd | -| minicom |minidlna |miniupnpc |miniupnpd |moby |modsecurity |monit | -| mosquitto |motion |mp4v2 |mpd |mpg123 |mpv |msmtp | -| mtr |mupdf |musl |mutt |mysql |nano |nasm | -| nbd |ncurses |neon |nessus |netatalk |netdata |netkit_ftp | -| netpbm |nettle |nghttp2 |nginx |ngircd |nmap |node | -| ntfs_3g |ntp |ntpsec |oath_toolkit |ofono |open_iscsi |open_vm_tools | -| openafs |openblas |opencv |openimageio |openjpeg |openldap |openocd | -| opensc |openssh |openssl |openswan |openvpn |openvswitch |orc | -| p7zip |pango |patch |pcre |pcre2 |pcsc_lite |perl | -| php |picocom |pigz |pixman |pjsip |png |polarssl_fedora | -| poppler |postgresql |ppp |privoxy |procps_ng |proftpd |protobuf_c | -| pspp |pure_ftpd |putty |python |qemu |qpdf |qt | -| quagga |radare2 |radvd |raptor |rauc |rdesktop |readline | -| redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump |ruby | -| runc |rust |samba |sane_backends |sasl |sdl |seahorse | -| shadowsocks_libev |snapcast |snapd |sngrep |snort |socat |sofia_sip | -| speex |spice |sqlite |squashfs |squid |sslh |stellarium | -| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | -| sysstat |systemd |tar |tbb |tcpdump |tcpreplay |terminology | -| tesseract |thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor | -| toybox |tpm2_tss |traceroute |traffic_server |transmission |trousers |ttyd | -| twonky_server |u_boot |udisks |unbound |unixodbc |upx |util_linux | -| uwsgi |varnish |vim |vlc |vorbis_tools |vsftpd |wabt | -| wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant |xerces | -| xml2 |xpdf |xscreensaver |xwayland |xz |yasm |zabbix | -| zbar |zchunk |zeek |zlib |znc |zsh |zstandard | -| zziplib | | | | | | | +| elfutils |emacs |enscript |erlang_otp |exfatprogs |exiftags |exim | +| exiv2 |f2fs_tools |faad2 |fastd |fastnetmon |ffmpeg |file | +| firefox |firejail |fish |flac |fluidsynth |freeradius |freerdp | +| fribidi |frr |fuse |gawk |gcc |gdal |gdb | +| gdk_pixbuf |gettext |ghostscript |gimp |git |glib |glibc | +| gmp |gnomeshell |gnupg |gnutls |go |gpgme |gpsd | +| graphicsmagick |grep |grub2 |gsasl |gsl |gstreamer |guile | +| gupnp |gvfs |gzip |haproxy |harfbuzz |haserl |hdf5 | +| heimdal |hostapd |hunspell |hwloc |i2pd |icecast |icu | +| imagemagick |indent |inetutils |iperf3 |ipmitool |ipsec_tools |iptables | +| iputils |irssi |iucode_tool |iwd |jack2 |jacksondatabind |janus | +| jasper |jbig |jhead |jq |json_c |kbd |keepalived | +| kerberos |kexectools |kodi |kubernetes |ldns |lftp |libarchive | +| libass |libbpg |libcap |libcoap |libconfuse |libcurl |libdb | +| libde265 |libebml |libevent |libexpat |libgcrypt |libgd |libgit2 | +| libheif |libhtp |libical |libidn2 |libinput |libjpeg |libjpeg_turbo | +| libksba |liblas |liblouis |libmatroska |libmemcached |libmicrohttpd |libmodbus | +| libnss |libopenmpt |libpcap |libraw |libreoffice |libreswan |librsvg | +| librsync |libsamplerate |libseccomp |libsixel |libsndfile |libsolv |libsoup | +| libsrtp |libssh |libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp | +| libuv |libvips |libvirt |libvncserver |libvorbis |libvpx |libxslt | +| libyaml |libyang |lighttpd |linux_kernel |linuxptp |lldpd |llvm | +| logrotate |lrzip |lua |luajit |lxc |lynx |lz4 | +| lzo2 |mailx |mariadb |mbedtls |mdadm |memcached |micropython | +| minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd |moby | +| modsecurity |monit |mosquitto |motion |mp4v2 |mpd |mpg123 | +| mpv |msmtp |mtr |mupdf |musl |mutt |mysql | +| nano |nasm |nbd |ncurses |neon |nessus |netatalk | +| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | +| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |ofono | +| open_babel |open_iscsi |open_vm_tools |openafs |openblas |opencv |openimageio | +| openjpeg |openldap |openocd |opensc |openssh |openssl |openswan | +| openvpn |openvswitch |orc |p7zip |pango |patch |pcre | +| pcre2 |pcsc_lite |perl |php |picocom |pigz |pixman | +| pjsip |png |polarssl |poppler |postgresql |ppp |privoxy | +| procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty |python | +| qemu |qpdf |qt |quagga |radare2 |radvd |raptor | +| rauc |rdesktop |readline |redis |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |ruby |runc |rust |samba |sane_backends | +| sasl |sdl |seahorse |shadowsocks_libev |snapcast |snapd |sngrep | +| snort |socat |sofia_sip |speex |spice |sqlite |squashfs | +| squid |sslh |stellarium |strongswan |stunnel |subversion |sudo | +| suricata |sylpheed |syslogng |sysstat |systemd |tar |tbb | +| tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd |thunderbird | +| timescaledb |tinyproxy |tor |toybox |tpm2_tss |traceroute |traffic_server | +| transmission |trousers |ttyd |twonky_server |u_boot |udisks |unbound | +| unixodbc |upx |util_linux |uwsgi |varnish |vim |vlc | +| vorbis_tools |vsftpd |wabt |wavpack |webkitgtk |wget |wireshark | +| wolfssl |wpa_supplicant |xerces |xml2 |xpdf |xrdp |xscreensaver | +| xwayland |xz |yasm |zabbix |zbar |zchunk |zeek | +| zlib |znc |zsh |zstandard |zziplib | | | For a quick overview of usage and how it works, you can also see [the readme file](README.md).