Date: Wed, 20 Jan 2016 12:19:58 +0100 From: Hanno Böck <hanno@...eck.de> To: kernel-hardening@...ts.openwall.com Subject: Re: 2015 kernel CVEs On Tue, 19 Jan 2016 12:49:17 +0100 Hanno Böck <hanno@...eck.de> wrote: > > There was only one that might have come from a USB fuzzer. > > We probably should be testing those things better. > > This is surprising to me. There was a talk at black hat amsterdam in > 2014 about a project trying to do exactly this. They sounded like they > have dozends of crashers that just need to be sorted and reported > upstream. Here's the code  and the talk . https://packetstormsecurity.com/files/133892/RedHat-Enterprise-Linux-7.1-Denial-Of-Service.html It seems they have started reporting issues and got limited replies. -- Hanno Böck http://hboeck.de/ mail/jabber: hanno@...eck.de GPG: BBB51E42 Content of type "application/pgp-signature" skipped
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.