Hi Aliyun, On Tue, Aug 04, 2015 at 03:05:50PM +0800, security wrote: > One of our whitehats has just reported an vulnerability to us. It is an > integer overflow problem of KVM WindowsGuestDrivers of VirtIO (Path: > kvm-guest-drivers-windows/NetKVM/DebugTools/VirtioConsoleSimulation/). > We don't know where to report this vulnerability to, so could you tell us > how and to whom can we report it. Thanks! please report it directly to Yan Vugenfirer (CC'ed). Ideally also CC secalert@xxxxxxxxxx -- we will take care of CVE assignment and coordination with other vendors in case the reported issue is important enough that it warrants an embargo period. Thanks, -- Petr Matousek / Red Hat Product Security PGP: 0xC44977CA 8107 AF16 A416 F9AF 18F3 D874 3E78 6F42 C449 77CA -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
