Hacker News new | ask | show | jobs
by cbisnett 3099 days ago
Just to clarify the terminology here:

- A vulnerability is a sofware bug that has particular behaviors and ramifications that allow it to be used maliciously.

- An exploit is a crafted piece of input data that is designed to trigger a vulnerability to execute arbitrary code, crash the target (Denial-of-Service), etc.

> In 2017 alone, 434 linux kernel exploits where found, and as you have seen in this post, kernel exploits can be devastating for containerized environments.

There are a few places in the article like this one where the correct terminology is vulnerability not exploit. cvedetails.com aggregates vulnerabilities. Places like exploit-db.com aggregate exploits people have written to take advantage of vulnerabilities to enable them to perform some unintended action against the target.

Edit: formatting