News for hackers. Stuff that matters.

A comment on Remote code execution vulnerability in apt/apt-get. Parent comment

Re:Remote code execution vulnerability in apt/apt-get by detaro on Tuesday January 22, 2019 @12:00PM (#18969782)
I have. Search for "ontgome" and it finds the bugs containing "Montgomery" (I have taken your url and just replaced the search word):

https://nvd.nist.gov/vuln/search/results?form_type=Advanced&...

I'm not saying none of the results from your search are RCEs, but not all are, and many are fairly speculative.

[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by dijit on Tuesday January 22, 2019 @12:04PM (#18969831)
Argh, that's frustrating, I checked 4 of them and thought it was fine.

The problem is that there seem to be many classifications of remote code execution including buffer overflow and "code injection" and you can't choose multiple. :(

[ Parent | on HN ]
Re:Remote code execution vulnerability in apt/apt-get by detaro on Tuesday January 22, 2019 @12:06PM (#18969866)
Yes, I also was surprised that the search didn't have more useful tools (e.g. search by high ranking in individual factors, or even just sort by severity: confirmed RCEs should all by very high)
[ Parent | on HN ]