On 6/1/2026 3:15 PM, Simon Clubley wrote:Which is not true.It's an 8.5 Arne. :-) That's not a process crash. That's a confirmedYou can speculate about Itanium being different. But I have not
exploitable vulnerability. (At least on Alpha/x86-64).
seen anything in what VSI has published that indicate Itanium is
different from this one.
The VSI CVE page actually say they are different and do explain
more about the problem:
<quote>
An issue was discovered in OpenVMS V8.4 through V8.4-2L2 on Alpha, V8.4 through V8.4-2L3 on IA64, and through V9.2-3 on x86. Passing a long string value to the F$CUNITS lexical function may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is exploitable on Alpha and x86 and may cause a process crash on IA64. Software was affected regardless of whether it was directly shipped by VMS Software, Inc. (VSI), HPE, or HP.
</quote>
Arne
Les messages affichés proviennent d'usenet.