CVE-2013-2688
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP…
Does this matter?
Lower severity and a low EPSS score (6.66%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file.
- CVSS 2.0
- 5.4 MEDIUMAV:N/AC:H/Au:N/C:N/I:N/A:C
- EPSS
- 6.66% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- blackberry/qnx software development platform · blackberry/qnx neutrino rtos
- Source
- cve@mitre.org
References
- http://aluigi.altervista.org/adv/qnxph_1-adv.txtExploit
- http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01Patch, US Government Resource
- http://www.qnx.com/download/feature.html?programid=24850Patch
- http://aluigi.altervista.org/adv/qnxph_1-adv.txtExploit
- http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01Patch, US Government Resource
- http://www.qnx.com/download/feature.html?programid=24850Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.