Embed Notice

@GossiTheDog CNAs are not supposed to “backdate” CVEs like that. It was previously kinda-sorta allowed, but these days, a CNE doesn’t get a block of CVEs. CNAs inform MITRE of approximately how many CVEs they expect to issue in a year, and as you publish them, identifiers are assigned. If I publish two CVEs they may not be sequential.

This CVE would have been in RESERVED status to hold onto the CVE-2023-34990 record. But wow, is that a long time before publishing.

(I did CNA training in 2022)