@@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD.
16
16
17
17
The tool has two main modes of operation:
18
18
19
- 1 . A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are <!-- NUMBER OF CHECKERS START--> 371 <!-- NUMBER OF CHECKERS END--> checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat.
19
+ 1 . A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are <!-- NUMBER OF CHECKERS START--> 376 <!-- NUMBER OF CHECKERS END--> checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat.
20
20
21
21
2 . Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats.
22
22
@@ -226,60 +226,61 @@ The following checkers are available for finding components in binary files:
226
226
227
227
<!-- CHECKERS TABLE BEGIN-->
228
228
| | | | Available checkers | | | |
229
- | --------------- | ------------- | ------------------ | ------------- | ---------------- | --------------- | ------------- |
230
- | accountsservice | acpid | apache_http_server | apcupsd | apparmor | asn1c | assimp |
231
- | asterisk | atftp | avahi | axel | bash | bind | binutils |
232
- | bird | bison | bluez | boinc | botan | bro | bubblewrap |
233
- | busybox | bwm_ng | bzip2 | c_ares | capnproto | ceph | chess |
234
- | chrony | civetweb | clamav | collectd | commons_compress | connman | coreutils |
235
- | cpio | cpp_httplib | cronie | cryptsetup | cups | curl | cvs |
236
- | darkhttpd | dav1d | davfs2 | dbus | debianutils | dhclient | dhcpcd |
237
- | dhcpd | dlt_daemon | dmidecode | dnsmasq | docker | domoticz | dosfstools |
238
- | dotnet | dovecot | doxygen | dpkg | dropbear | e2fsprogs | ed |
239
- | elfutils | emacs | enscript | exfatprogs | exim | exiv2 | f2fs_tools |
240
- | faad2 | fastd | ffmpeg | file | firefox | flac | fluidsynth |
241
- | freeradius | freerdp | fribidi | frr | gawk | gcc | gdal |
242
- | gdb | gdk_pixbuf | ghostscript | gimp | git | glib | glibc |
243
- | gmp | gnomeshell | gnupg | gnutls | go | gpgme | gpsd |
244
- | graphicsmagick | grep | grub2 | gstreamer | gupnp | gvfs | gzip |
245
- | haproxy | harfbuzz | haserl | hdf5 | heimdal | hostapd | hunspell |
246
- | hwloc | i2pd | icecast | icu | iperf3 | ipmitool | ipsec_tools |
247
- | iptables | irssi | iucode_tool | iwd | jack2 | jacksondatabind | janus |
248
- | jasper | jhead | jq | json_c | kbd | keepalived | kerberos |
249
- | kexectools | kodi | kubernetes | ldns | lftp | libarchive | libass |
250
- | libbpg | libcoap | libconfuse | libcurl | libdb | libde265 | libebml |
251
- | libevent | libexpat | libgcrypt | libgd | libgit2 | libheif | libical |
252
- | libidn2 | libinput | libjpeg | libjpeg_turbo | libksba | liblas | libmatroska |
253
- | libmemcached | libmicrohttpd | libmodbus | libnss | libopenmpt | libpcap | libraw |
254
- | librsvg | librsync | libsamplerate | libseccomp | libsndfile | libsolv | libsoup |
255
- | libsrtp | libssh | libssh2 | libtasn1 | libtiff | libtomcrypt | libupnp |
256
- | libuv | libvips | libvirt | libvncserver | libvorbis | libvpx | libxslt |
257
- | libyaml | lighttpd | linux_kernel | linuxptp | lldpd | logrotate | lrzip |
258
- | lua | luajit | lxc | lynx | lz4 | mailx | mariadb |
259
- | mbedtls | mdadm | memcached | micropython | minetest | mini_httpd | minicom |
260
- | minidlna | miniupnpc | miniupnpd | moby | modsecurity | monit | mosquitto |
261
- | motion | mp4v2 | mpg123 | mpv | msmtp | mtr | mupdf |
262
- | mutt | mysql | nano | nasm | nbd | ncurses | neon |
263
- | nessus | netatalk | netdata | netkit_ftp | netpbm | nettle | nghttp2 |
264
- | nginx | ngircd | nmap | node | ntfs_3g | ntp | ntpsec |
265
- | oath_toolkit | open_iscsi | open_vm_tools | openafs | opencv | openjpeg | openldap |
266
- | opensc | openssh | openssl | openswan | openvpn | orc | p7zip |
267
- | pango | patch | pcre | pcre2 | pcsc_lite | perl | php |
268
- | picocom | pigz | pixman | png | polarssl_fedora | poppler | postgresql |
269
- | ppp | privoxy | procps_ng | proftpd | protobuf_c | pspp | pure_ftpd |
270
- | putty | python | qemu | qpdf | qt | quagga | radare2 |
271
- | radvd | raptor | rauc | rdesktop | readline | rpm | rsync |
272
- | rsyslog | rtl_433 | rtmpdump | runc | rust | samba | sane_backends |
273
- | sdl | seahorse | shadowsocks_libev | snapd | sngrep | snort | socat |
274
- | sofia_sip | speex | spice | sqlite | squashfs | squid | sslh |
275
- | stellarium | strongswan | stunnel | subversion | sudo | suricata | sylpheed |
276
- | syslogng | sysstat | systemd | tar | tcpdump | tcpreplay | terminology |
277
- | tesseract | thrift | thttpd | thunderbird | timescaledb | tinyproxy | tor |
278
- | tpm2_tss | traceroute | transmission | trousers | ttyd | twonky_server | u_boot |
279
- | udisks | unbound | unixodbc | upx | util_linux | varnish | vim |
280
- | vlc | vorbis_tools | vsftpd | webkitgtk | wget | wireshark | wolfssl |
281
- | wpa_supplicant | xerces | xml2 | xscreensaver | xwayland | xz | yasm |
282
- | zabbix | zchunk | zeek | zlib | znc | zsh | zstandard |
229
+ | --------------- | ------------ | ------------------ | ------------- | ------------- | ----------------- | ---------------- |
230
+ | accountsservice | acpid | apache_http_server | apcupsd | apparmor | apr | asn1c |
231
+ | assimp | asterisk | atftp | avahi | axel | bash | bind |
232
+ | binutils | bird | bison | bluez | boa | boinc | botan |
233
+ | bro | bubblewrap | busybox | bwm_ng | bzip2 | c_ares | capnproto |
234
+ | ceph | chess | chrony | civetweb | clamav | collectd | commons_compress |
235
+ | connman | coreutils | cpio | cpp_httplib | cronie | cryptsetup | cups |
236
+ | curl | cvs | darkhttpd | dav1d | davfs2 | dbus | debianutils |
237
+ | dhclient | dhcpcd | dhcpd | dlt_daemon | dmidecode | dnsmasq | docker |
238
+ | domoticz | dosfstools | dotnet | dovecot | doxygen | dpkg | dropbear |
239
+ | e2fsprogs | ed | elfutils | emacs | enscript | exfatprogs | exim |
240
+ | exiv2 | f2fs_tools | faad2 | fastd | ffmpeg | file | firefox |
241
+ | flac | fluidsynth | freeradius | freerdp | fribidi | frr | gawk |
242
+ | gcc | gdal | gdb | gdk_pixbuf | ghostscript | gimp | git |
243
+ | glib | glibc | gmp | gnomeshell | gnupg | gnutls | go |
244
+ | gpgme | gpsd | graphicsmagick | grep | grub2 | gstreamer | gupnp |
245
+ | gvfs | gzip | haproxy | harfbuzz | haserl | hdf5 | heimdal |
246
+ | hostapd | hunspell | hwloc | i2pd | icecast | icu | iperf3 |
247
+ | ipmitool | ipsec_tools | iptables | irssi | iucode_tool | iwd | jack2 |
248
+ | jacksondatabind | janus | jasper | jhead | jq | json_c | kbd |
249
+ | keepalived | kerberos | kexectools | kodi | kubernetes | ldns | lftp |
250
+ | libarchive | libass | libbpg | libcoap | libconfuse | libcurl | libdb |
251
+ | libde265 | libebml | libevent | libexpat | libgcrypt | libgd | libgit2 |
252
+ | libheif | libical | libidn2 | libinput | libjpeg | libjpeg_turbo | libksba |
253
+ | liblas | libmatroska | libmemcached | libmicrohttpd | libmodbus | libnss | libopenmpt |
254
+ | libpcap | libraw | librsvg | librsync | libsamplerate | libseccomp | libsndfile |
255
+ | libsolv | libsoup | libsrtp | libssh | libssh2 | libtasn1 | libtiff |
256
+ | libtomcrypt | libupnp | libuv | libvips | libvirt | libvncserver | libvorbis |
257
+ | libvpx | libxslt | libyaml | lighttpd | linux_kernel | linuxptp | lldpd |
258
+ | logrotate | lrzip | lua | luajit | lxc | lynx | lz4 |
259
+ | mailx | mariadb | mbedtls | mdadm | memcached | micropython | minetest |
260
+ | mini_httpd | minicom | minidlna | miniupnpc | miniupnpd | moby | modsecurity |
261
+ | monit | mosquitto | motion | mp4v2 | mpg123 | mpv | msmtp |
262
+ | mtr | mupdf | mutt | mysql | nano | nasm | nbd |
263
+ | ncurses | neon | nessus | netatalk | netdata | netkit_ftp | netpbm |
264
+ | nettle | nghttp2 | nginx | ngircd | nmap | node | ntfs_3g |
265
+ | ntp | ntpsec | oath_toolkit | open_iscsi | open_vm_tools | openafs | opencv |
266
+ | openjpeg | openldap | opensc | openssh | openssl | openswan | openvpn |
267
+ | orc | p7zip | pango | patch | pcre | pcre2 | pcsc_lite |
268
+ | perl | php | picocom | pigz | pixman | png | polarssl_fedora |
269
+ | poppler | postgresql | ppp | privoxy | procps_ng | proftpd | protobuf_c |
270
+ | pspp | pure_ftpd | putty | python | qemu | qpdf | qt |
271
+ | quagga | radare2 | radvd | raptor | rauc | rdesktop | readline |
272
+ | redis | rpm | rsync | rsyslog | rtl_433 | rtmpdump | runc |
273
+ | rust | samba | sane_backends | sdl | seahorse | shadowsocks_libev | snapd |
274
+ | sngrep | snort | socat | sofia_sip | speex | spice | sqlite |
275
+ | squashfs | squid | sslh | stellarium | strongswan | stunnel | subversion |
276
+ | sudo | suricata | sylpheed | syslogng | sysstat | systemd | tar |
277
+ | tcpdump | tcpreplay | terminology | tesseract | thrift | thttpd | thunderbird |
278
+ | timescaledb | tinyproxy | tor | toybox | tpm2_tss | traceroute | transmission |
279
+ | trousers | ttyd | twonky_server | u_boot | udisks | unbound | unixodbc |
280
+ | upx | util_linux | varnish | vim | vlc | vorbis_tools | vsftpd |
281
+ | wavpack | webkitgtk | wget | wireshark | wolfssl | wpa_supplicant | xerces |
282
+ | xml2 | xscreensaver | xwayland | xz | yasm | zabbix | zchunk |
283
+ | zeek | zlib | znc | zsh | zstandard | | |
283
284
<!-- CHECKERS TABLE END-->
284
285
285
286
All the checkers can be found in the checkers directory, as can the
0 commit comments