4 ms·

> I'm curious the motivations to release such a serious, and complex, 0day on new years eve!? CVE 2018-0001, it's all about namespaces.

• floatingatoll 9y ago
  Bonus points if they issue it as CVE-2018-65536 (pen-test the world, so to speak) EDIT: "No one would ever store the CVE incrementing fragment as a 16-bit unsigned int!"
  • jacquesm 9y ago
    Or in the pattern CVE-dddd-dddd ... For additional fun, find a buffer overrun based on the CVE ID.
  • JdeBP 9y ago
    You yourself clearly do not. (-:
• tlrobinson 9y ago
  CVE 2018-0002: Flaw in CVE numbering procedure incentivizes dropping zero days on New Year’s Eve.
  • stevekemp 9y ago
    I remember waiting to report a security issue with some trivial setuid application until January, back a few years, specifically so I could claim the first CVE of the year. I was unlucky and it didn't work out, but come December time I do wonder if I should dedicate more time to audits ..
• codezero 9y ago
  Looks like that number was already reserved for a still unpublished vuln. We’re already up to > 3000 in 2018!