Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Catalog memcached binary #1459

Closed
witchcraze opened this issue Jan 14, 2023 · 1 comment · Fixed by #1486
Closed

Catalog memcached binary #1459

witchcraze opened this issue Jan 14, 2023 · 1 comment · Fixed by #1486
Labels
enhancement New feature or request

Comments

@witchcraze
Copy link
Contributor

What would you like to be added:

An additional file classifier which finds memcached binary.

Why is this needed:

memcached is widely used.

pullCount : 1B+
starCount : 2.0K+
from https://hub.docker.com/_/memcached

memcached will be installed without a package manger in container env with official image.
We want to be able to catalog this.

$ syft -q memcached:1.6 | grep mem
$
$ docker run -it --rm memcached:1.6 memcached --version
memcached 1.6.18

Additional context:

cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:* is used in NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-10931


DOCKER OFFICIAL IMAGE : memcached:1.6

$ which memcached
/usr/local/bin/memcached

$ memcached --version
memcached 1.6.18

$ strings memcached | grep '1\.6\.18'
memcached 1.6.18
memcached 1.6.18
VERSION 1.6.18

DOCKER OFFICIAL IMAGE : memcached:1.6-alpine

$ which memcached
/usr/local/bin/memcached

$ memcached --version
memcached 1.6.18

$ strings /usr/local/bin/memcached | grep '1\.6\.18'
memcached 1.6.18
memcached 1.6.18
VERSION 1.6.18

Ubuntu 22.04 + OS Package (This will be shown as package)

# which memcached
/usr/bin/memcached

# memcached --version
memcached 1.6.14

# strings /usr/bin/memcached | grep '1\.6\.14'
memcached 1.6.14
memcached 1.6.14
VERSION 1.6.14

RHEL8 + OS Package (This will be shown as package)

# which memcached
/usr/bin/memcached

# memcached --version
memcached 1.5.22

# strings /usr/bin/memcached | grep '1\.5\.22'
VERSION 1.5.22
memcached 1.5.22
memcached 1.5.22
memcached-1.5.22-2.el8.x86_64.debug
@witchcraze witchcraze added the enhancement New feature or request label Jan 14, 2023
@kzantow kzantow added this to OSS Jan 17, 2023
@kzantow kzantow moved this to Backlog in OSS Jan 17, 2023
@kzantow
Copy link
Contributor

kzantow commented Jan 17, 2023

Thanks @witchcraze -- added this to the backlog and of course, PRs are welcome!

@github-project-automation github-project-automation bot moved this from Backlog to Done in OSS Jan 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants