[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <a2ac8e7e-e45c-40bc-b517-dffcd4def530@gmail.com>
Date: Thu, 13 Nov 2025 19:34:04 -0600
From: Jacob Bachmeyer <jcb62281@...il.com>
To: oss-security@...ts.openwall.com, Peter Gutmann
<pgut001@...auckland.ac.nz>, Russ Allbery <eagle@...ie.org>
Subject: Re: Questionable CVE's reported against dnsmasq
On 11/12/25 20:19, Peter Gutmann wrote:
> [...]
>
> [0] For example modify the code/operating environment to introduce a security
> vulnerability, I'll let you decide whether this qualifies as impractical,
> unrealistic, stupid, or several of the above.
Ah yes, the universal arbitrary code execution exploit: simply replace
the program text with malicious code. :-)
Can we call it CVE-Zero? :-P
-- Jacob
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
