4 ms·

How many of these would result in RCE?

• dijit 8y ago
  64? https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&query=RCE&search_type=all&cpe_vendor=cpe%3A%2F%3Aopenssl&cpe_product=cpe%3A%2F%3A%3Aopenssl https://nvd.nist.gov/vuln/search/results?form_type=Advanced&...
  • detaro 8y ago
    Fulltext search for "rce", which finds "resou_rce_", "sou_rce_", does not give a number of RCE vulnerabilities.
    • dijit 8y ago
      Except that "EXACT MATCH" is enabled, try yourself. (It should be noted that it /does/ match on "possible RCE", which buffer overflows are often tagged with.)
      • detaro 8y ago
        I have. Search for "ontgome" and it finds the bugs containing "Montgomery" (I have taken your url and just replaced the search word): https://nvd.nist.gov/vuln/search/results?form_type=Advanced&results_type=overview&query=ontgome&search_type=all&cpe_vendor=cpe%3A%2F%3Aopenssl&cpe_product=cpe%3A%2F%3A%3Aopenssl https://nvd.nist.gov/vuln/search/results?form_type=Advanced&... I'm not saying none of the results from your search are RCEs, but not all are, and many are fairly speculative.
        • dijit 8y ago
          Argh, that's frustrating, I checked 4 of them and thought it was fine. The problem is that there seem to be many classifications of remote code execution including buffer overflow and "code injection" and you can't choose multiple. :(
          • detaro 8y ago
            Yes, I also was surprised that the search didn't have more useful tools (e.g. search by high ranking in individual factors, or even just sort by severity: confirmed RCEs should all by very high)
    • da_chicken 8y ago
      As far as I can tell, NIST doesn't directly directly use the term RCE. CVE-2010-5298 is an OpenSSL vulnerability that allows data injection that could potentially result in code execution, but there's no easy way to see that from NIST's categorization: https://nvd.nist.gov/vuln/detail/CVE-2010-5298 https://nvd.nist.gov/vuln/detail/CVE-2010-5298
      • detaro 8y ago
        that's an additional problem with relying on text search.
• ryanlol 8y ago
  Hard to give an exact amount but there have been loads of potentially exploitable memory corruption issues.