diff --git a/.github/actions/spelling/allow.txt b/.github/actions/spelling/allow.txt index 0ad0cf99d4..f7ad782b1c 100644 --- a/.github/actions/spelling/allow.txt +++ b/.github/actions/spelling/allow.txt @@ -79,6 +79,7 @@ ceph cfa cfea cff +cflow chaitanyamogal Changelog charset @@ -151,6 +152,7 @@ dio Dio distro distros +djvulibre dlt dmidecode dnsmasq diff --git a/README.md b/README.md index dea9576464..08cf95baa2 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ CVE Binary Tool uses the NVD API but is not endorsed or certified by the NVD. The tool has two main modes of operation: -1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 377 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. +1. A binary scanner which helps you determine which packages may have been included as part of a piece of software. There are 379 checkers. Our initial focus was on common, vulnerable open source components such as openssl, libpng, libxml2 and expat. 2. Tools for scanning known component lists in various formats, including .csv, several linux distribution package lists, language specific package scanners and several Software Bill of Materials (SBOM) formats. @@ -226,61 +226,62 @@ The following checkers are available for finding components in binary files: | | | | Available checkers | | | | -|--------------- |--------------- |------------------ |------------- |------------- |------------- |----------------- | +|---------------- |----------------- |------------------ |--------------- |-------------- |------------- |------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |apr |asn1c | | assimp |asterisk |atftp |avahi |axel |bash |bind | | binutils |bird |bison |bluez |boa |boinc |botan | | bro |bubblewrap |busybox |bwm_ng |bzip2 |c_ares |capnproto | -| ceph |chess |chrony |civetweb |clamav |collectd |commons_compress | -| connman |coreutils |cpio |cpp_httplib |cronie |cryptsetup |cups | -| curl |cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils | -| dhclient |dhcpcd |dhcpd |dlt_daemon |dmidecode |dnsmasq |docker | -| domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg |dropbear | -| e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs |exim | -| exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file |firefox | -| flac |fluidsynth |freeradius |freerdp |fribidi |frr |gawk | -| gcc |gdal |gdb |gdk_pixbuf |ghostscript |gimp |git | -| glib |glibc |gmp |gnomeshell |gnupg |gnutls |go | -| gpgme |gpsd |graphicsmagick |grep |grub2 |gstreamer |gupnp | -| gvfs |gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal | -| hostapd |hunspell |hwloc |i2pd |icecast |icu |indent | -| iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool |iwd | -| jack2 |jacksondatabind |janus |jasper |jhead |jq |json_c | -| kbd |keepalived |kerberos |kexectools |kodi |kubernetes |ldns | -| lftp |libarchive |libass |libbpg |libcoap |libconfuse |libcurl | -| libdb |libde265 |libebml |libevent |libexpat |libgcrypt |libgd | -| libgit2 |libheif |libical |libidn2 |libinput |libjpeg |libjpeg_turbo | -| libksba |liblas |libmatroska |libmemcached |libmicrohttpd |libmodbus |libnss | -| libopenmpt |libpcap |libraw |librsvg |librsync |libsamplerate |libseccomp | -| libsndfile |libsolv |libsoup |libsrtp |libssh |libssh2 |libtasn1 | -| libtiff |libtomcrypt |libupnp |libuv |libvips |libvirt |libvncserver | -| libvorbis |libvpx |libxslt |libyaml |lighttpd |linux_kernel |linuxptp | -| lldpd |logrotate |lrzip |lua |luajit |lxc |lynx | -| lz4 |mailx |mariadb |mbedtls |mdadm |memcached |micropython | -| minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd |moby | -| modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 |mpv | -| msmtp |mtr |mupdf |mutt |mysql |nano |nasm | -| nbd |ncurses |neon |nessus |netatalk |netdata |netkit_ftp | -| netpbm |nettle |nghttp2 |nginx |ngircd |nmap |node | -| ntfs_3g |ntp |ntpsec |oath_toolkit |open_iscsi |open_vm_tools |openafs | -| opencv |openjpeg |openldap |opensc |openssh |openssl |openswan | -| openvpn |orc |p7zip |pango |patch |pcre |pcre2 | -| pcsc_lite |perl |php |picocom |pigz |pixman |png | -| polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng |proftpd | -| protobuf_c |pspp |pure_ftpd |putty |python |qemu |qpdf | -| qt |quagga |radare2 |radvd |raptor |rauc |rdesktop | -| readline |redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump | -| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | -| snapd |sngrep |snort |socat |sofia_sip |speex |spice | -| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | -| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | -| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | -| thunderbird |timescaledb |tinyproxy |tor |toybox |tpm2_tss |traceroute | -| transmission |trousers |ttyd |twonky_server |u_boot |udisks |unbound | -| unixodbc |upx |util_linux |varnish |vim |vlc |vorbis_tools | -| vsftpd |wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant | -| xerces |xml2 |xscreensaver |xwayland |xz |yasm |zabbix | -| zchunk |zeek |zlib |znc |zsh |zstandard | | +| ceph |cflow |chess |chrony |civetweb |clamav |collectd | +| commons_compress |connman |coreutils |cpio |cpp_httplib |cronie |cryptsetup | +| cups |curl |cvs |darkhttpd |dav1d |davfs2 |dbus | +| debianutils |dhclient |dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode | +| dnsmasq |docker |domoticz |dosfstools |dotnet |dovecot |doxygen | +| dpkg |dropbear |e2fsprogs |ed |elfutils |emacs |enscript | +| exfatprogs |exim |exiv2 |f2fs_tools |faad2 |fastd |ffmpeg | +| file |firefox |flac |fluidsynth |freeradius |freerdp |fribidi | +| frr |gawk |gcc |gdal |gdb |gdk_pixbuf |ghostscript | +| gimp |git |glib |glibc |gmp |gnomeshell |gnupg | +| gnutls |go |gpgme |gpsd |graphicsmagick |grep |grub2 | +| gstreamer |gupnp |gvfs |gzip |haproxy |harfbuzz |haserl | +| hdf5 |heimdal |hostapd |hunspell |hwloc |i2pd |icecast | +| icu |indent |iperf3 |ipmitool |ipsec_tools |iptables |irssi | +| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jhead | +| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | +| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcoap | +| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | +| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | +| libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached |libmicrohttpd | +| libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg |librsync | +| libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp |libssh | +| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | +| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |lighttpd | +| linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua |luajit | +| lxc |lynx |lz4 |mailx |mariadb |mbedtls |mdadm | +| memcached |micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc | +| miniupnpd |moby |modsecurity |monit |mosquitto |motion |mp4v2 | +| mpg123 |mpv |msmtp |mtr |mupdf |mutt |mysql | +| nano |nasm |nbd |ncurses |neon |nessus |netatalk | +| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | +| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |open_iscsi | +| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | +| openssl |openswan |openvpn |orc |p7zip |pango |patch | +| pcre |pcre2 |pcsc_lite |perl |php |picocom |pigz | +| pixman |png |polarssl_fedora |poppler |postgresql |ppp |privoxy | +| procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty |python | +| qemu |qpdf |qt |quagga |radare2 |radvd |raptor | +| rauc |rdesktop |readline |redis |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |runc |rust |samba |sane_backends |sdl | +| seahorse |shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip | +| speex |spice |sqlite |squashfs |squid |sslh |stellarium | +| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | +| sysstat |systemd |tar |tcpdump |tcpreplay |terminology |tesseract | +| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |toybox | +| tpm2_tss |traceroute |transmission |trousers |ttyd |twonky_server |u_boot | +| udisks |unbound |unixodbc |upx |util_linux |varnish |vim | +| vlc |vorbis_tools |vsftpd |wavpack |webkitgtk |wget |wireshark | +| wolfssl |wpa_supplicant |xerces |xml2 |xscreensaver |xwayland |xz | +| yasm |zabbix |zchunk |zeek |zlib |znc |zsh | +| zstandard | | | | | | | All the checkers can be found in the checkers directory, as can the diff --git a/doc/MANUAL.md b/doc/MANUAL.md index 91bb36a9df..8fb0e22bf8 100644 --- a/doc/MANUAL.md +++ b/doc/MANUAL.md @@ -242,61 +242,62 @@ which is useful if you're trying the latest code from | | | | Available checkers | | | | -|--------------- |--------------- |------------------ |------------- |------------- |------------- |----------------- | +|---------------- |----------------- |------------------ |--------------- |-------------- |------------- |------------- | | accountsservice |acpid |apache_http_server |apcupsd |apparmor |apr |asn1c | | assimp |asterisk |atftp |avahi |axel |bash |bind | | binutils |bird |bison |bluez |boa |boinc |botan | | bro |bubblewrap |busybox |bwm_ng |bzip2 |c_ares |capnproto | -| ceph |chess |chrony |civetweb |clamav |collectd |commons_compress | -| connman |coreutils |cpio |cpp_httplib |cronie |cryptsetup |cups | -| curl |cvs |darkhttpd |dav1d |davfs2 |dbus |debianutils | -| dhclient |dhcpcd |dhcpd |dlt_daemon |dmidecode |dnsmasq |docker | -| domoticz |dosfstools |dotnet |dovecot |doxygen |dpkg |dropbear | -| e2fsprogs |ed |elfutils |emacs |enscript |exfatprogs |exim | -| exiv2 |f2fs_tools |faad2 |fastd |ffmpeg |file |firefox | -| flac |fluidsynth |freeradius |freerdp |fribidi |frr |gawk | -| gcc |gdal |gdb |gdk_pixbuf |ghostscript |gimp |git | -| glib |glibc |gmp |gnomeshell |gnupg |gnutls |go | -| gpgme |gpsd |graphicsmagick |grep |grub2 |gstreamer |gupnp | -| gvfs |gzip |haproxy |harfbuzz |haserl |hdf5 |heimdal | -| hostapd |hunspell |hwloc |i2pd |icecast |icu |indent | -| iperf3 |ipmitool |ipsec_tools |iptables |irssi |iucode_tool |iwd | -| jack2 |jacksondatabind |janus |jasper |jhead |jq |json_c | -| kbd |keepalived |kerberos |kexectools |kodi |kubernetes |ldns | -| lftp |libarchive |libass |libbpg |libcoap |libconfuse |libcurl | -| libdb |libde265 |libebml |libevent |libexpat |libgcrypt |libgd | -| libgit2 |libheif |libical |libidn2 |libinput |libjpeg |libjpeg_turbo | -| libksba |liblas |libmatroska |libmemcached |libmicrohttpd |libmodbus |libnss | -| libopenmpt |libpcap |libraw |librsvg |librsync |libsamplerate |libseccomp | -| libsndfile |libsolv |libsoup |libsrtp |libssh |libssh2 |libtasn1 | -| libtiff |libtomcrypt |libupnp |libuv |libvips |libvirt |libvncserver | -| libvorbis |libvpx |libxslt |libyaml |lighttpd |linux_kernel |linuxptp | -| lldpd |logrotate |lrzip |lua |luajit |lxc |lynx | -| lz4 |mailx |mariadb |mbedtls |mdadm |memcached |micropython | -| minetest |mini_httpd |minicom |minidlna |miniupnpc |miniupnpd |moby | -| modsecurity |monit |mosquitto |motion |mp4v2 |mpg123 |mpv | -| msmtp |mtr |mupdf |mutt |mysql |nano |nasm | -| nbd |ncurses |neon |nessus |netatalk |netdata |netkit_ftp | -| netpbm |nettle |nghttp2 |nginx |ngircd |nmap |node | -| ntfs_3g |ntp |ntpsec |oath_toolkit |open_iscsi |open_vm_tools |openafs | -| opencv |openjpeg |openldap |opensc |openssh |openssl |openswan | -| openvpn |orc |p7zip |pango |patch |pcre |pcre2 | -| pcsc_lite |perl |php |picocom |pigz |pixman |png | -| polarssl_fedora |poppler |postgresql |ppp |privoxy |procps_ng |proftpd | -| protobuf_c |pspp |pure_ftpd |putty |python |qemu |qpdf | -| qt |quagga |radare2 |radvd |raptor |rauc |rdesktop | -| readline |redis |rpm |rsync |rsyslog |rtl_433 |rtmpdump | -| runc |rust |samba |sane_backends |sdl |seahorse |shadowsocks_libev | -| snapd |sngrep |snort |socat |sofia_sip |speex |spice | -| sqlite |squashfs |squid |sslh |stellarium |strongswan |stunnel | -| subversion |sudo |suricata |sylpheed |syslogng |sysstat |systemd | -| tar |tcpdump |tcpreplay |terminology |tesseract |thrift |thttpd | -| thunderbird |timescaledb |tinyproxy |tor |toybox |tpm2_tss |traceroute | -| transmission |trousers |ttyd |twonky_server |u_boot |udisks |unbound | -| unixodbc |upx |util_linux |varnish |vim |vlc |vorbis_tools | -| vsftpd |wavpack |webkitgtk |wget |wireshark |wolfssl |wpa_supplicant | -| xerces |xml2 |xscreensaver |xwayland |xz |yasm |zabbix | -| zchunk |zeek |zlib |znc |zsh |zstandard | | +| ceph |cflow |chess |chrony |civetweb |clamav |collectd | +| commons_compress |connman |coreutils |cpio |cpp_httplib |cronie |cryptsetup | +| cups |curl |cvs |darkhttpd |dav1d |davfs2 |dbus | +| debianutils |dhclient |dhcpcd |dhcpd |djvulibre |dlt_daemon |dmidecode | +| dnsmasq |docker |domoticz |dosfstools |dotnet |dovecot |doxygen | +| dpkg |dropbear |e2fsprogs |ed |elfutils |emacs |enscript | +| exfatprogs |exim |exiv2 |f2fs_tools |faad2 |fastd |ffmpeg | +| file |firefox |flac |fluidsynth |freeradius |freerdp |fribidi | +| frr |gawk |gcc |gdal |gdb |gdk_pixbuf |ghostscript | +| gimp |git |glib |glibc |gmp |gnomeshell |gnupg | +| gnutls |go |gpgme |gpsd |graphicsmagick |grep |grub2 | +| gstreamer |gupnp |gvfs |gzip |haproxy |harfbuzz |haserl | +| hdf5 |heimdal |hostapd |hunspell |hwloc |i2pd |icecast | +| icu |indent |iperf3 |ipmitool |ipsec_tools |iptables |irssi | +| iucode_tool |iwd |jack2 |jacksondatabind |janus |jasper |jhead | +| jq |json_c |kbd |keepalived |kerberos |kexectools |kodi | +| kubernetes |ldns |lftp |libarchive |libass |libbpg |libcoap | +| libconfuse |libcurl |libdb |libde265 |libebml |libevent |libexpat | +| libgcrypt |libgd |libgit2 |libheif |libical |libidn2 |libinput | +| libjpeg |libjpeg_turbo |libksba |liblas |libmatroska |libmemcached |libmicrohttpd | +| libmodbus |libnss |libopenmpt |libpcap |libraw |librsvg |librsync | +| libsamplerate |libseccomp |libsndfile |libsolv |libsoup |libsrtp |libssh | +| libssh2 |libtasn1 |libtiff |libtomcrypt |libupnp |libuv |libvips | +| libvirt |libvncserver |libvorbis |libvpx |libxslt |libyaml |lighttpd | +| linux_kernel |linuxptp |lldpd |logrotate |lrzip |lua |luajit | +| lxc |lynx |lz4 |mailx |mariadb |mbedtls |mdadm | +| memcached |micropython |minetest |mini_httpd |minicom |minidlna |miniupnpc | +| miniupnpd |moby |modsecurity |monit |mosquitto |motion |mp4v2 | +| mpg123 |mpv |msmtp |mtr |mupdf |mutt |mysql | +| nano |nasm |nbd |ncurses |neon |nessus |netatalk | +| netdata |netkit_ftp |netpbm |nettle |nghttp2 |nginx |ngircd | +| nmap |node |ntfs_3g |ntp |ntpsec |oath_toolkit |open_iscsi | +| open_vm_tools |openafs |opencv |openjpeg |openldap |opensc |openssh | +| openssl |openswan |openvpn |orc |p7zip |pango |patch | +| pcre |pcre2 |pcsc_lite |perl |php |picocom |pigz | +| pixman |png |polarssl_fedora |poppler |postgresql |ppp |privoxy | +| procps_ng |proftpd |protobuf_c |pspp |pure_ftpd |putty |python | +| qemu |qpdf |qt |quagga |radare2 |radvd |raptor | +| rauc |rdesktop |readline |redis |rpm |rsync |rsyslog | +| rtl_433 |rtmpdump |runc |rust |samba |sane_backends |sdl | +| seahorse |shadowsocks_libev |snapd |sngrep |snort |socat |sofia_sip | +| speex |spice |sqlite |squashfs |squid |sslh |stellarium | +| strongswan |stunnel |subversion |sudo |suricata |sylpheed |syslogng | +| sysstat |systemd |tar |tcpdump |tcpreplay |terminology |tesseract | +| thrift |thttpd |thunderbird |timescaledb |tinyproxy |tor |toybox | +| tpm2_tss |traceroute |transmission |trousers |ttyd |twonky_server |u_boot | +| udisks |unbound |unixodbc |upx |util_linux |varnish |vim | +| vlc |vorbis_tools |vsftpd |wavpack |webkitgtk |wget |wireshark | +| wolfssl |wpa_supplicant |xerces |xml2 |xscreensaver |xwayland |xz | +| yasm |zabbix |zchunk |zeek |zlib |znc |zsh | +| zstandard | | | | | | | For a quick overview of usage and how it works, you can also see [the readme file](README.md).