PT-2017-18880 · Blackberry · Qnx Sdp

Publicado 2017-11-14 · Atualizado 2025-08-26 · CVE-2017-9369

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry QNX Software Development Platform (SDP) versions 6.5.0 SP1 and earlier, 6.6.0

Description An information disclosure issue exists in the default configuration of the QNX SDP, allowing an attacker to gain information about the memory layout of higher privileged processes. This is achieved by manipulating environment variables that influence the loader.

Recommendations For BlackBerry QNX Software Development Platform (SDP) versions 6.5.0 SP1 and earlier, consider restricting access to environment variables that influence the loader until a fix is available. For version 6.6.0, consider restricting access to environment variables that influence the loader until a fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-9369

Produtos afetados

Qnx Sdp

Referências · 4

• http://support.blackberry.com/kb/articleDetail?articleNumber=000046674 · Aviso do Fabricante
• https://t.me/cveNotify/133538 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-9369 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9369 · Aviso do Fabricante