oss-security - Re: CVE-2018-1000204: Linux kernel 3.18 to 4.16 infoleak due to incorrect handling of SG

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <195286405.46114672.1530032082079.JavaMail.zimbra@redhat.com>
Date: Tue, 26 Jun 2018 12:54:42 -0400 (EDT)
From: Vladis Dronov <vdronov@...hat.com>
To: Alexander Potapenko <glider@...gle.com>
Cc: oss-security@...ts.openwall.com
Subject: Re: CVE-2018-1000204: Linux kernel 3.18 to 4.16
 infoleak due to incorrect handling of SG_IO ioctl

Hello, Alexander,

> > I may not got smth correctly, but for now I do not see CVE-2018-1000204
> > as a security flaw and I believe a reject request to MITRE should be
> > issued.
> How do I proceed with this?

I believe it is: https://cveform.mitre.org/ -> Request an update to an existing
CVE Entry -> Rejection

Best regards,
Vladis Dronov | Red Hat, Inc. | Product Security Engineer

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.