Estimate for the total number of exploitable bugs in large linux distro?

[John Newman]

On Fri, Jul 14, 2017 at 12:30:56PM +0300, Georgi Guninski wrote:
> What is an estimate for the total number of exploitable bugs in large
> linux distro?

Bugs that already have some PoC or other code to exploit the issue? Or
the sum total of all exploitable bugs, discovered and undiscovered?

The first case should be relatively small with a very current
release..  the second case obviously could be different.

> 
> Also, does the total number decrease, increase or change in other way
> over time?

Without patching, discovered bugs will increase over time. The actual
number of bugs stays the same of course (again, without patching).

Obviously you're a fool if you don't maintain your software...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.cpunks.org/pipermail/cypherpunks/attachments/20170714/143b36eb/attachment-0002.sig>