PT-2017-18882 · Blackberry · Qnx Sdp

Published 2017-11-14 · Updated 2025-08-22 · CVE-2017-9371

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry QNX Software Development Platform (SDP) versions 6.6.0 and 6.5.0 SP1 and earlier

Description A loss of integrity issue in the default configuration of the QNX SDP could allow an attacker to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.

Recommendations For BlackBerry QNX Software Development Platform (SDP) versions 6.6.0 and 6.5.0 SP1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-332

Related Identifiers

CVE-2017-9371

Affected Products

Qnx Sdp

References · 4

• https://osv.dev/vulnerability/CVE-2017-9371 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9371 · Security Note
• http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674 · Vendor Advisory
• https://t.me/cveNotify/133179 · Telegram Post