CVE-2013-2687

2022-10-0316:14:59

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-2687

buffer overflow

blackberry

qnx

neutrino

rtos

momentics tool suite

denial of service

remote attack

8.7 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.008 Low

EPSS

Percentile

81.9%

JSON

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momentics Tool Suite through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868.

Affected configurations

NVD

Node

blackberryqnx_momentics_tool_suiteRange≤6.5.0sp1

blackberryqnx_momentics_tool_suiteMatch4.5

blackberryqnx_momentics_tool_suiteMatch4.6

blackberryqnx_momentics_tool_suiteMatch4.7

blackberryqnx_momentics_tool_suiteMatch6.5.0

blackberryqnx_software_development_platformMatch-

blackberryqnx_neutrino_rtosRange≤6.5.0sp1

blackberryqnx_neutrino_rtosMatch6.4.1

blackberryqnx_neutrino_rtosMatch6.5.0

CPENameOperatorVersion
blackberry:qnx_momentics_tool_suiteblackberry qnx momentics tool suitele6.5.0
blackberry:qnx_momentics_tool_suiteblackberry qnx momentics tool suiteeq4.5
blackberry:qnx_momentics_tool_suiteblackberry qnx momentics tool suiteeq4.6
blackberry:qnx_momentics_tool_suiteblackberry qnx momentics tool suiteeq4.7
blackberry:qnx_software_development_platformblackberry qnx software development platformeq-
blackberry:qnx_neutrino_rtosblackberry qnx neutrino rtosle6.5.0
blackberry:qnx_neutrino_rtosblackberry qnx neutrino rtoseq6.4.1

CPE	Name	Operator	Version
blackberry:qnx_momentics_tool_suite	blackberry qnx momentics tool suite	le	6.5.0
blackberry:qnx_momentics_tool_suite	blackberry qnx momentics tool suite	eq	4.5
blackberry:qnx_momentics_tool_suite	blackberry qnx momentics tool suite	eq	4.6
blackberry:qnx_momentics_tool_suite	blackberry qnx momentics tool suite	eq	4.7
blackberry:qnx_software_development_platform	blackberry qnx software development platform	eq	-
blackberry:qnx_neutrino_rtos	blackberry qnx neutrino rtos	le	6.5.0
blackberry:qnx_neutrino_rtos	blackberry qnx neutrino rtos	eq	6.4.1