Reporting vulnerabilities within a complex software environment
summary
CVE Binary Tool performs binary analysis to detect library versions in compiled applications and map them to known CVEs; it can now detect over 100 libraries thanks to Google Summer of Code contributions. The tool also scans Linux distributions, analyses Python applications, and ingests Software Bill of Materials in SPDX and CycloneDX formats; the talk explains its operation, demonstrates several use cases, and outlines how to contribute to its development.
AI-written summary · about
related talks
24mUsing Python to Detect Vulnerabilities in Binaries
39mSelect Bugs From Binary Where Pattern Like CVE-1337-Days
33mWhere is my Code Vulnerable: Matching CVEs and Source Code
33mIdentifying Multi-Binary Vulnerabilities in Embedded Firmware at Scale
42mNavigating the Sea of CVEs: Securing Your Linux Distributions
56mCVE Is The Worst Vulnerability Framework (Except For All The Others)
21mState of Attack Surface Elimination in a World Plagued by Vulnerable Software
17mDetect and Track the Vulnerabilities Hiding in Your Dependencies