ICSA-13-189-01

icsaUScisa_csaf_ot

QNX Multiple Vulnerabilities

view advisory published 2013-04-10

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2013-2688USmedium5.4—
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (applicat…
CVE-2013-2687UShigh7.8—
Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Softw…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationPhditto

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
  • MitigationPhditto

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
  • MitigationPhrelay

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
  • MitigationPhrelay

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
  • MitigationPhwindows

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
  • MitigationPhwindows

    QNX has released a patch that mitigates these vulnerabilities. The patch is compatible with targets that are running QNX Neutrino 6.5.0 or 6.5.0 SP1. The patch is available on the QNX Web site: (http://www.qnx.com/download/feature.html?programid=24850)

    http://www.qnx.com/download/feature.html?programid=24850
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan