Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20160120121958.4a392837@pc1>
Date: Wed, 20 Jan 2016 12:19:58 +0100
From: Hanno Böck <hanno@...eck.de>
To: kernel-hardening@...ts.openwall.com
Subject: Re: 2015 kernel CVEs

On Tue, 19 Jan 2016 12:49:17 +0100
Hanno Böck <hanno@...eck.de> wrote:

> > There was only one that might have come from a USB fuzzer.
> > We probably should be testing those things better.  
> 
> This is surprising to me. There was a talk at black hat amsterdam in
> 2014 about a project trying to do exactly this. They sounded like they
> have dozends of crashers that just need to be sorted and reported
> upstream. Here's the code [2] and the talk [3].

https://packetstormsecurity.com/files/133892/RedHat-Enterprise-Linux-7.1-Denial-Of-Service.html

It seems they have started reporting issues and got limited replies.


-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno@...eck.de
GPG: BBB51E42

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.