CVE-2017-9371CWE-332

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the…

Low · published November 14, 2017

CVSS v3.1
2.6
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00806 · 56.1th percentile
Weakness
CWE-332 · Insufficient Entropy in PRNG
Published
2017-11-14T21:00Z
EPSS history
Timeline
  • 14 NOV 21:00Z
    In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the…
    cvelistv5