[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CVE ID speculation



We've talked about CVE assignment and potential information 
leakage/speculation.  Just noting an active example of it happening.  
I'm not sure there's much we can or should do about it, or that it's 
worth the investment over other efforts CVE could be working on, but 
it's part of the ID assignment service discussion at least.

https://newsroom.intel.com/articles/addressing-questions-regarding-additional-security-issues/

https://www.heise.de/ct/artikel/Exclusive-Spectre-NG-Multiple-new-Intel-CPU-flaws-revealed-several-serious-4040648.html

 - Art




Page Last Updated or Reviewed: May 10, 2018