CVE-2019-8998 - An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space

Back Back to CVE browser

HIGH

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space

Published Jul 12, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.22%

Description

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.

Affected products

Vendor BlackBerry Product QNX Software Development Platform (QNX SDP) Default
unaffected
- Version
  6.5.0 SP1 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

BlackBerry

QNX Software Development Platform (QNX SDP)

unaffected

Version	Status	Constraints
6.5.0 SP1 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-413

References (2)

http://support.blackberry.com/kb/articleDetail?articleNumber=000057178
x_refsource_MISCMitigationPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18385
Advisory

Link	Providers	Tags
http://support.blackberry.com/kb/articleDetail?articleNumber=000057178		x_refsource_MISCMitigationPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18385		Advisory