Why is VulnCheck Publishing Advisories for So Many Old Software Versions?
Asked by
CuriousCat88
Hey everyone, I recently stumbled upon some security advisories that have been published lately, but they seem to reference some pretty old software versions. I found several advisories that even mentioned CVEs from 2013 or earlier. What struck me is that all these advisories come from VulnCheck, and if you check their site, you'll see they often focus on outdated and unsupported software that's linked to these old CVE codes. It really makes me wonder what the purpose is behind these advisories. It can be frustrating to receive notifications about 'new' critical vulnerabilities, only to realize they're about software that should have been updated or replaced ages ago. Anyone have insights on this?
Answers
Based on what I've seen, it looks like VulnCheck may have some automated process in place that's gone a bit haywire. They might be flooding the scene with alerts for ancient vulnerabilities tied to outdated software versions. I’d definitely be cautious about taking their claims at face value until they're clearer about their source.
Reply to this answer
Not everyone can always keep up with the latest software versions. A lot of legacy systems are still in use, and vulnerabilities in them can still pose real risks. Those advisories might be trying to alert for potential issues that could affect users who haven't updated yet.
Reply to this answer
I checked one of their advisories, and it mentions a date in the future but references a public write-up from 2014! This makes me question the reliability of the alerts. If they've started recycling old content, it's probably time to re-evaluate their credibility. Just because there's a new advisory, doesn't mean it's relevant to current systems.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions