CVEvulnerability

CVE-2017-9371

2.6 LOW Published 2017-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.6 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-332

Description

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.

Affected configurations

• blackberry qnx software development platform 6.5.0 • blackberry qnx software development platform 6.6.0

Related

Weakness · CWE (1)

  • CWE-332 Insufficient Entropy in PRNG weakness

References