CVE-2017-9371: Medium severity blackberry qnx vulnerability
In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-9371?
CVE-2017-9371 is a vulnerability in BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, which could allow an attacker to reduce the PRNG entropy and gain control over the system.
What is the severity of CVE-2017-9371?
The severity of CVE-2017-9371 is medium with a CVSS score of 5.9.
How does CVE-2017-9371 impact BlackBerry QNX Software Development Platform?
CVE-2017-9371 can lead to a loss of integrity in the default configuration of BlackBerry QNX SDP, making other blended attacks more practical and allowing an attacker to gain control over the system.
What versions of BlackBerry QNX SDP are affected by CVE-2017-9371?
CVE-2017-9371 affects BlackBerry QNX SDP versions 6.6.0 and 6.5.0 SP1 and earlier.
How can I fix CVE-2017-9371?
To fix CVE-2017-9371, it is recommended to update to a patched version of BlackBerry QNX SDP.