3 ms·
> I'm sure the CVE numbers will overwhelmingly show that most RCE-capable vulnerabilities are in C/C++. This is where it is critical to differenciate C and C++
by jcelerier 7y ago
> I'm sure the CVE numbers will overwhelmingly show that most RCE-capable vulnerabilities are in C/C++.
This is where it is critical to differenciate C and C++.
https://jaxenter.com/security-vulnerabilities-languages-157038.html https://jaxenter.com/security-vulnerabilities-languages-1570...
> Total reported open source vulnerabilities per language:
> C (46.9%)
> PHP (16.7%)
> Java (11.4%)
> JavaScript (10.2%)
> Python (5.45%)
> C++ (5.23%)
> Ruby (4.25%)
- Asooka 7y agoI would like to see those stats divided by total SLOC in all projects for each language. C might top the list simply because there's a lot of C projects in the dataset.
- pjmlp 7y agoWell, Morris Worm is now 30 years old and C CVEs due to memory corruption bugs have kept a stendy growth since then.