News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in apt/apt-get. Parent comment

Re:Remote code execution vulnerability in apt/apt-get by da_chicken on Tuesday January 22, 2019 @11:59AM (#18969770)
As far as I can tell, NIST doesn't directly directly use the term RCE. CVE-2010-5298 is an OpenSSL vulnerability that allows data injection that could potentially result in code execution, but there's no easy way to see that from NIST's categorization:

https://nvd.nist.gov/vuln/detail/CVE-2010-5298

[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by detaro on Tuesday January 22, 2019 @12:01PM (#18969789)
that's an additional problem with relying on text search.
[ Parent | on HN ]