On Tue, 14 Mar 2017 at 13:38:37 -0400, Victor Roemer wrote:
> I originally reported the vulnerability to ioquake3. I'd like to help with the
> CVE however I can.
> I'm not familiar with CVE reports which is why one hasn't already been
> written.
MITRE's new process really doesn't help matters there...
I've requested a CVE ID, with this bug given as a contact address.
Hopefully that will work.
Sorry, I didn't see this email until after I had sent the CVE request,
and the ioquake3 maintainers didn't credit you in their advisory, so
the initial CVE request doesn't credit you either. That wasn't intentional
on my part.
S