国防部和CVE

来:cve-editorial-board-list <cve-editorial-board-list@mitre.org>
主题:国防部和CVE
从:Kurt Seifried <kurt@seifried.org>
日期:2018年10月09:58:48结婚,-0600
Authentication-results:防晒系数= softfail(发送者的IP 198.49.146.235) smtp.mailfrom = seifried.org;imc.mitre.org;dkim =失败(签名并没有验证)header.d = seifried-org.20150623.gappssmtp.com, imc.mitre.org;dmarc =没有行动=没有header.from = seifried.org;
交货日期:2018年10月10日12:01:42结婚
Dkim-signature:v = 1;一个= rsa-sha256;c = /放松放松;d = seifried-org.20150623.gappssmtp.com;s = 20150623;h = mime-version::日期:问题:主题:;bh = fddbH5d4fMYId1chVWzGaplbmhm89Oh5OTPgitG + FCU =;b = RDBuLcCuEKxPDtje54cTvRGBt8Nvy0MnX + OusHX8Unu92yWIs46DzrHQLYokP2V + nQ v7T2YyGOpZK + Tyxjmc3ZrVCzDC4vKZ3CW56iv7cW7l6QSOlyIgNzvwf9Noozt3zay285 XKc1Fge1yGU + vnJvb65635OcgBqL / PEk19HCPi5dcV3M80jcd4ttLKcRRsCY93pUtIER 9/2s6cuqtMe8NyvUz / 1 hohtqgzxhgwet0n90u0vb9rz0jxy36yxyh6wt + 8 hjlgt39om + sCprq9znj9svdbPeSpmP3 / b3fMtuTJ6/9J5cx3RtbxcfmbvK7hzIAwb pdz8cyNSacl6 fWeA = =
Dkim-signature:v = 1;一个= rsa-sha256;c = /放松放松;d = mitre.org;h = mime-version::日期:问题:主题::内容类型;s = selector1;bh = fddbH5d4fMYId1chVWzGaplbmhm89Oh5OTPgitG + FCU =;b = Ze3yyu9ddFNeABvwAGzThct4Rai3VMKIcTM / V5cadOZvCRshWgSpbCV8B QVKPaW3 + hkJ5M8ZMZH + WIrveyXu3B / cDrJimJB3 + HoEGCd6M98ThDF5j9gEV4efvsd90YMnq / CCEaMHy4l5nfQApwxrs70xVps + cfefkn8uUD6b9o =
Spamdiagnosticmetadata:NSPM
Spamdiagnosticoutput:1:9 9

我不禁觉得国防部可能需要一些CVE相关的帮助:

https://www.gao.gov/mobile/products/gao - 19 - 128

也提高了一点“CVE是公共漏洞”,但我们也许应该关注公众是什么意思/如何定义(我想象国防部/相关社区将受益于CVE,但并不总是能够使cf他们真正的公共分配)。也许一个单独的名称空间/数字空间这种事情吗?(ala IPv4空间10。* 172.16。*等等)。

- - -

Kurt Seifried
kurt@seifried.org

跟进:
- 再保险:国防部和CVE
  - 来自:帕默< pmeunier@cerias.purdue.edu >