PT-2023-23974 · Blackberry · Qnx Sdp

CVE-2023-32701 · Publicado 2023-11-14 · Atualizado 2025-09-09

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions QNX SDP versions 6.6, 7.0, and 7.1

Description The issue is related to improper input validation in the networking stack, which could allow an attacker to potentially cause information disclosure or a denial-of-service condition.

Recommendations For QNX SDP version 6.6, update to a version that includes the fix for the improper input validation issue. For QNX SDP version 7.0, update to a version that includes the fix for the improper input validation issue. For QNX SDP version 7.1, update to a version that includes the fix for the improper input validation issue. As a temporary workaround, consider restricting access to the networking stack to minimize the risk of exploitation.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-1288

CWE-20

Identificadores relacionados

CVE-2023-32701

Produtos afetados

Qnx Sdp

Referências · 6

• https://support.blackberry.com/kb/articleDetail?articleNumber=000112401 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-32701 · Aviso do Fabricante
• https://t.me/cvenotify/60992 · Publicação no Telegram
• https://t.me/cveNotify/133193 · Publicação no Telegram
• https://t.me/cveNotify/134770 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-32701 · Nota de Segurança