CVE-2020-19909 is everything that is wrong with CVEs | daniel.haxx.se

This is a story consisting of several little building blocks and they occurred spread out in time and in different places. It is a story that shows with clarity how our current system with CVE Ids and lots of power given to NVD is a completely broken system. CVE-2020-19909 On August 25 2023, we got an email to the curl-library mailing list from Samuel Henrique that informed us that “someone” had r

[Vorspiel]

なんじゃこりゃ?? どうやったらこれに9.8なんてついちまうのか / こういうことかあ…(コメ欄) https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/#comment-26746

[defiant]

すでに修正済みのバグ（セキュリティの問題ではなくバグとして修正）について、誰かがCVEを登録して公開されてるというお話。しかもなぜかCVE-2020がついてる。

[z67kjh]

意味不明過ぎて悪意よりバグか何かが絡んでる気がする