News for hackers. Stuff that matters.

A comment on Disclosing a directory traversal vulnerability in Kubernetes copy.

Re:Disclosing a directory traversal vulnerability in Kuberne... by igi3ql on Sunday March 31, 2019 @06:03AM (#19534744)
Did they start counting with 1000000, or do we really have a million bugs security bugs in 2019 already?
[ Parent | on HN ]
Re:Disclosing a directory traversal vulnerability in Kuberne... by 0x0 on Sunday March 31, 2019 @06:06AM (#19534750)
The number scheme changed around 2014 when the numbers started getting close to -9999

https://cve.mitre.org/cve/identifiers/syntaxchange.html

Might as well add a massive 1000 prefix when upping the number of digits to catch truncating bugs early (seeing a bunch of 1000 is more obvious than if just the last of 5 digits is dropped)

[ Parent | on HN ]
Re:Disclosing a directory traversal vulnerability in Kuberne... by kerng on Sunday March 31, 2019 @06:38AM (#19534837)
Thousands of security issues don't even get CVE in a timely manner or lack details, or are not reported/included in the catalog at all. MITRE and NVD are overloaded and underfunded.

http://hackwolrdwide.com/7900-vulnerabilities-didnt-make-it-...

[ Parent | on HN ]