Lucene search

K
cve[email protected]CVE-2013-2688
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2688

2022-10-0316:15:02
CWE-119
web.nvd.nist.gov
32
cve-2013-2688
buffer overflow
blackberry
qnx neutrino rtos
denial of service
arbitrary code
nvd

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

8.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file.

Affected configurations

NVD
Node
blackberryqnx_software_development_platformMatch-
OR
blackberryqnx_neutrino_rtosRange6.5.0sp1
OR
blackberryqnx_neutrino_rtosMatch6.4.1
OR
blackberryqnx_neutrino_rtosMatch6.5.0

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

8.4 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

Related for CVE-2013-2688