3 ms·
Whats the CVE ? [1] Next Critical Patch Updates by Oracle is scheduled at 15 January 2019. [2] I see this bug exists at least in part in the open-source parts
by barrystaes 8y ago
Whats the CVE ? [1]
Next Critical Patch Updates by Oracle is scheduled at 15 January 2019. [2]
I see this bug exists at least in part in the open-source parts of VirtualBox. [3] Could it be fixed there?
Could that (that part being opensource) also be reason for the researcher not being granted the bug's bounty?
[1] https://cve.mitre.org/cve/ https://cve.mitre.org/cve/
[2] https://www.oracle.com/technetwork/topics/security/alerts-086861.html https://www.oracle.com/technetwork/topics/security/alerts-08...
[3] https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devices/Network/DevE1000.cpp#L4377 https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devic...