2 ms·
Most openssl-CVEs suffer from massive severity inflation. ”If you can fool a client running on AIX to connect to a server with deprecated hashing algorithm fro
by nikanj 3y ago
Most openssl-CVEs suffer from massive severity inflation.
”If you can fool a client running on AIX to connect to a server with deprecated hashing algorithm from 1986, you can make the client take an extra 40 milliseconds to process the packets”
”CVE 9.9 resource exhaustion DDoS confirmed”
- ilyt 3y agoThat's CVEs in general it seems "if you set input parameters of curl to absolute nonsense, something bad will happen" 9.8/10 https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/ https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-eve... https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/ https://daniel.haxx.se/blog/2023/09/05/bogus-cve-follow-ups/