Pwnie Awards 2017

The 2017 Pwnie Award For Lamest Vendor Response

5998

Lennart Poettering

Where you are dereferencing null pointers, or writing out of bounds, or not supporting fully qualified domain names, or giving root privileges to any user whose name begins with a number, there’s no chance that the CVE number will referenced in either the change log or the commit message. But CVEs aren’t really our currency any more, and only the lamest of vendors gets a Pwnie!