The bogus CVE problem

Posted Sep 18, 2023 12:14 UTC (Mon) by wtarreau (subscriber, #51152)
In reply to: The bogus CVE problem by mcatanzaro
Parent article: The bogus CVE problem

> Most CVEs are valid.

Some ex-insiders such as Kurt Seifried and Josh Bressers in a recent talk disagreed with this suggesting that around 20% only were valid. See the link to their talk below in another comment.