Full Disclosure mailing list archives
Q: CVE Database with Programming Language and Failure Classification?
From: Jeffrey Walton <noloader () gmail com>
Date: Mon, 13 May 2013 23:54:53 -0400
Hi All, Does anyone know where to find an augmented CVE database with: (1) programming language and (2) failure classification? For example, CVE-2013-3301 is the Linux kernel, written in C, and the failure is lack of parameter validation. As another example, CVE-2013-3302 would also be the Linux kernel, written in C, with a failure of race condition. (I'm very interested in aggregated data on all programs/modules written in C/C++/Objective C). Jeff _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Q: CVE Database with Programming Language and Failure Classification? Jeffrey Walton (May 13)
- Re: Q: CVE Database with Programming Language and Failure Classification? Florian Weimer (May 15)