BlackBerry QNX-2021-001 Vulnerability Affecting Cisco Products: August 2021
On August 17, 2021, BlackBerry released a security advisory, QNX-2021-001 ["https://support.blackberry.com/kb/articleDetail?articleNumber=000082334"], that disclosed an integer overflow vulnerability in the following BlackBerry software releases: QNX Software Development Platform (SDP) – 6.5.0SP1 and earlier QNX OS for Medical – 1.1 and earlier QNX OS for Safety – 1.0.1 and earlier A successful exploit could allow an attacker to execute arbitrary code or cause a denial of service (DoS). For a description of this vulnerability, see QNX-2021-001 ["https://support.blackberry.com/kb/articleDetail?articleNumber=000082334"]. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdL"]
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-22156US | critical9.8 | — | ||
An integer overflow vulnerability in the calloc() function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform (SDP) version(s) 6.5.0SP1… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Bug Search Toolexternal
- CSCvz34865external
- CSCvz34866external
- CSCvz34869external
- CSCvz34871external
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-qnx-TOxjVPdLexternal
- Security Vulnerability Policyexternal
- fixed software releasesexternal
Behebungen (1)
- Kein Fix verfügbar
No remediation is available at this time.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan