oss-sec mailing list archives

Re: why many CVEs are ** RESERVED ** on Mitre


From: Marcus Meissner <meissner () suse de>
Date: Wed, 14 Dec 2016 17:06:49 +0100

On Wed, Dec 14, 2016 at 03:17:57PM +0000, Sevan Janiyan wrote:


On 14/12/2016 15:09, Kurt Seifried wrote:
I would suggest you consider getting involved in helping create CVEs if it
is such an important resource, rather then just being a somewhat classic
"Free rider"

https://en.wikipedia.org/wiki/Free_rider_problem

Would creating CVEs help with the reservations of already disclosed CVEs?

There is a clear allocation strategy for CVEs, using a multi tiered tree
of CNA (candidate naming authorities)

CVEs are not randomly grabbed but assigned by these CNAs.

Ciao, Marcus


Current thread: