VIR Vulnerability Intelligence Relay

CVE-2017-9371

low
Published 2017-11-14 · Modified 2026-05-13
CVSS v3
2.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v2
4.3
VIR risk
2.6

Description

In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an attacker being able to reduce the entropy of the PRNG, making other blended attacks more practical by gaining control over environmental factors that influence seed generation.

Predictions

Exploit likelihood
28%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@blackberry.com — http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000046674

Application impact
VendorProductVersionsFixed
blackberryqnx_software_development_platform6.5.0
blackberryqnx_software_development_platform6.6.0

References

CWEs

CWE-332

Verify integrity in audit chain (admin only). AS-IS.