Description
Buffer overflow in phrelay in BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 in the QNX Software Development Platform allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted packets to TCP port 4868 that leverage improper handling of the /dev/photon device file.
References (3)
Core 3
Core References
Exploit x_refsource_misc
http://aluigi.altervista.org/adv/qnxph_1-adv.txt
Patch, US Government Resource x_refsource_misc
http://ics-cert.us-cert.gov/advisories/ICSA-13-189-01
Patch x_refsource_confirm
http://www.qnx.com/download/feature.html?programid=24850
Scores
EPSS
0.0666
EPSS Percentile
93.1%
Details
CWE
CWE-119
Status
published
Products (4)
blackberry/qnx_neutrino_rtos
6.4.1
blackberry/qnx_neutrino_rtos
6.5.0
blackberry/qnx_neutrino_rtos
< 6.5.0
blackberry/qnx_software_development_platform
Published
Jul 12, 2013
Tracked Since
Feb 18, 2026