News for hackers. Stuff that matters.

A comment on BSD libc contains a buffer overflow vulnerability. Parent comment

Re:BSD libc contains a buffer overflow vulnerability by jlgaddis on Wednesday December 07, 2016 @02:44PM (#13125555)
Perhaps it was discovered by an individual on OS X, reported (by the individual) to Apple, reported (by either the individual or Apple) to CERT, then CERT looked at it, found the other affected operating systems, and reported it to them?

There's a number of ways this particular "ordering" could have occurred.

[ Parent | on HN ]
Re:BSD libc contains a buffer overflow vulnerability by richardwhiuk on Wednesday December 07, 2016 @03:17PM (#13125824)
It's possible it was reported to Apple because they have a vulnerability bounty program, so they individual who reported it could get a reward. That might create an incentive to report it to larger targets who may run larger bounty programs.
[ Parent | on HN ]