Lucene search

[email protected]CVE-2002-1983

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1983

2002-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-1983

qnx

rtos

denial of service

arbitrary code

timer

vulnerability

8.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick.

CPENameOperatorVersion
qnx:rtosqnx rtoseq6.1.0

CPE	Name	Operator	Version
qnx:rtos	qnx rtos	eq	6.1.0

References

online.securityfocus.com/archive/1/298689

www.securityfocus.com/bid/6114

exchange.xforce.ibmcloud.com/vulnerabilities/10550

8.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-1983

cvelist1