Un fallo crítico llamado «BadAlloc» en QNX RTOS de BlackBerry pone en peligro a más de 200 millones de coches y equipamiento en hospitales, La vulnerabilidad registrada como CVE-2021-22156 tiene una puntuación de gravedad CVSS 9 sobre 10. La actitud de BlackBerry, que ha escondido el problema y hasta hace poco no ha hecho la llamada «revelación responsable» de información de seguridad y vulnerabilidades. BlackBerry anunció en Junio del presente año 2021 cómo QNX RTOS está embebido en 195 millones de vehículos de fabricantes como BMW, Ford, Honda, Mercedes-Benz, Toyota o Volkswagen, pero su alcance es aún mayor y hay otros segmentos en los que este sistema operativo es también fundamental.
- La empresa licencia QNX a OEMs, que luego integran ese sistema operativo en dispositivos para sus clientes.
En BlackBerry le dijeron al gobierno que no sabían dónde acababa su software, y que no tenían intención de hacer un anuncio público: la idea era avisar en privado a los clientes potencialmente afectados. - BlackBerry ha licenciado QNX a múltiples fabricantes de dispositivos que necesitaban un sistema operativo en tiempo real (RTOS) para sectores de lo más diversos, desde motor hasta medicina, siempre para casos en los que una fracción de segundo puede marcar la diferencia.
La vulnerabilidad, identificada como CVE-2021-22156 puede ser explotada remotamente y puede llevar a la ejecución de código arbitrario y a forzar la denegación de servicio del sistema afectado. Un conjunto de riesgos más que suficiente como para que BlackBerry hubiera informado inmediatamente sobre ello, se hubiera puesto manos a la obra para solucionarlo, y en este momento los parches para los dispositivos afectados ya estuvieran en camino.
El problema afecta a versiones de QNX RTOS de 2012 y anteriores y por lo tanto las versiones modernas del sistema operativo, que como indica el sitio web oficial tienen un amplio alcance en el mundo de la automoción, están a salvo.
El pasado mes de Abril Microsoft avisó de la presencia de una vulnerabilidad llamada BadAlloc que afectaba a diversas versiones de sus sistemas operativos. El problema era grave, pero en Microsoft trabajaron junto al CISA (Cybersecurity and Infrastructure Security Agency) en EE.UU. para resolverlo y alertar a las agencias y organismos de que actualizaran sus sistemas cuando se publicó el parche poco después.
¿Qué harías si descubres una vulnerabilidad en un software que es parte fundamental de millones de coches (o motocicletas) y dispositivos santiario? En BlackBerry no dijeron nada: sabían que su sistema operativo en tiempo real, QNX, podía estar afectado, pero prefirieron negar cualquier problema.
Finalmente BlackBerry publicó el reporte correspondiente (ahora parece haber desaparecido, pero es posible recuperarlo vía Internet Archive) y a su vez CISA también publicó una alerta que precisamente estaba centrada en cómo BadAlloc afectaba a QNX RTOS.
El silencio de BlackBerry
La vulnerabilidad, identificada como CVE-2021-22156 puede ser explotada remotamente y puede llevar a la ejecución de código arbitrario y a forzar la denegación de servicio del sistema afectado. Un conjunto de riesgos más que suficiente como para que BlackBerry hubiera informado inmediatamente sobre ello, se hubiera puesto manos a la obra para solucionarlo, y en este momento los parches para los dispositivos afectados ya estuvieran en camino.
Pero no, BlackBerry optó por silenciarlo y, lo que es peor aún, tras publicar en su web una alerta sobre la vulnerabilidad, posteriormente han elegido borrarla, pese a que sigue estando enlazada desde múltiples webs, incluida al de la CISA, que informan sobre la incidencia.
En CISA aseguran que el software se usa en un amplio catálogo de productos y de verse comprometidos, eso podría representar «un riesgo creciente para funciones críticas de la nación
Yeah bookmaking this wasn’t a speculative conclusion outstanding post! .
Please let me know if you’re looking for a article author for your site. You have some really great articles and I think I would be a good asset. If you ever want to take some of the load off, I’d absolutely love to write some material for your blog in exchange for a link back to mine. Please send me an email if interested. Cheers!
I got what you mean , thanks for putting up.Woh I am delighted to find this website through google. «The test and use of a man’s education is that he finds pleasure in the exercise of his mind.» by Carl Barzun.
Thanks for the blog post, can I set it up so I receive an alert email whenever you publish a fresh article?
Very interesting topic, thanks for putting up.
I appreciate, cause I found exactly what I was looking for. You have ended my 4 day long hunt! God Bless you man. Have a great day. Bye
You are my inhalation, I own few web logs and sometimes run out from brand :). «He who controls the past commands the future. He who commands the future conquers the past.» by George Orwell.
You have remarked very interesting points! ps decent web site. «‘Tis a sharp medicine, but it will cure all that ails you. — last words before his beheadding» by Sir Walter Raleigh.
O GOLDCARD é um cartão virtual com acesso à conteúdos de tv, filmes e séries
he blog was how do i say it… relevant, finally something that helped me. Thanks
Regards for helping out, superb info .
Some genuinely good information, Sword lily I noticed this. «The beauty seen is partly in him who sees it.» by Christian Nestell Bovee.
Hello, you used to write excellent, but the last few posts have been kinda boring?K I miss your tremendous writings. Past few posts are just a little bit out of track! come on!
I will right away clutch your rss feed as I can not in finding your e-mail subscription hyperlink or e-newsletter service. Do you’ve any? Kindly let me know so that I may just subscribe. Thanks.
I will right away grab your rss as I can not find your email subscription link or e-newsletter service. Do you’ve any? Please let me know so that I could subscribe. Thanks.
Please let me know if you’re looking for a article writer for your blog. You have some really good articles and I believe I would be a good asset. If you ever want to take some of the load off, I’d absolutely love to write some content for your blog in exchange for a link back to mine. Please shoot me an e-mail if interested. Kudos!
Thanks for the marvelous posting! I truly enjoyed reading it, you may be a great author.I will make sure to bookmark your blog and will eventually come back someday. I want to encourage you to continue your great job, have a nice evening!
Asyabahis Sitesinde Kayıt Yaptırmak Ya Da Üye Olmak İçin Üye Ol Sekmesine Tıklayıp Sizden İstenilen Bilgileri Doldurmanız Gerekiyor.
It’s a pity you don’t have a donate button! I’d certainly donate to this brilliant blog! I suppose for now i’ll settle for book-marking and adding your RSS feed to my Google account. I look forward to fresh updates and will share this website with my Facebook group. Talk soon!
Your place is valueble for me. Thanks!…
Absolutely written content, Really enjoyed examining.
Youre so cool! I dont suppose Ive read anything like this before. So nice to search out any person with some original thoughts on this subject. realy thank you for starting this up. this website is one thing that is needed on the net, somebody with a bit of originality. useful job for bringing one thing new to the internet!
Hi there! Would you mind if I share your blog with my myspace group? There’s a lot of folks that I think would really enjoy your content. Please let me know. Thanks
I like this post, enjoyed this one thanks for posting. «It is well to give when asked but it is better to give unasked, through understanding.» by Kahlil Gibran.
I conceive this web site has some really great information for everyone :D. «Years wrinkle the skin, but to give up enthusiasm wrinkles the soul.» by Samuel Ullman.
I like this post, enjoyed this one regards for putting up. «It is well to give when asked but it is better to give unasked, through understanding.» by Kahlil Gibran.
Very interesting info !Perfect just what I was searching for! «To see what is right, and not to do it, is want of courage or of principle.» by Lisa Alther.
Great beat ! I wish to apprentice while you amend your website, how can i subscribe for a blog website? The account helped me a acceptable deal. I had been tiny bit acquainted of this your broadcast offered bright clear idea
Hello There. I found your blog using msn. This is a very well written article. I’ll make sure to bookmark it and come back to read more of your useful info. Thanks for the post. I’ll definitely return.
Thanks for your personal marvelous posting! I genuinely enjoyed reading it, you’re a great author.I will remember to bookmark your blog and will come back down the road. I want to encourage you to ultimately continue your great posts, have a nice holiday weekend!
Hmm is anyone else encountering problems with the images on this blog loading? I’m trying to find out if its a problem on my end or if it’s the blog. Any suggestions would be greatly appreciated.
I am impressed with this web site, rattling I am a fan.
Some really nice stuff on this internet site, I like it.
Respect to article author, some fantastic information .
Excellent read, I just passed this onto a colleague who was doing some research on that. And he actually bought me lunch as I found it for him smile Thus let me rephrase that: Thanks for lunch! «The capacity to care is what gives life its most deepest significance.» by Pablo Casals.
As I web site possessor I believe the content material here is rattling excellent , appreciate it for your efforts. You should keep it up forever! Good Luck.
Hi there! This post couldn’t be written any better! Reading through this post reminds me of my previous room mate! He always kept talking about this. I will forward this article to him. Pretty sure he will have a good read. Thank you for sharing!
After all, what a great site and informative posts, I will upload inbound link – bookmark this web site? Regards, Reader.
But wanna remark on few general things, The website style and design is perfect, the subject matter is real good. «The reason there are two senators for each state is so that one can be the designated driver.» by Jay Leno.
You are my inhalation, I own few blogs and very sporadically run out from brand :). «Actions lie louder than words.» by Carolyn Wells.
I truly appreciate this post. I have been looking everywhere for this! Thank goodness I found it on Bing. You have made my day! Thx again!
F*ckin’ awesome issues here. I’m very satisfied to see your article. Thanks so much and i am having a look forward to contact you. Will you please drop me a mail?
Wow! Thank you! I continuously wanted to write on my blog something like that. Can I implement a fragment of your post to my website?
O Cupom da Vez é um aplicativo inovador que permite aos usuários ganhar dinheiro extra ao avaliar produtos e cupons em categorias como vestuário, eletrônicos, itens domésticos e muito mais.
O Cupom da Vez é um aplicativo inovador que permite aos usuários ganhar dinheiro extra ao avaliar produtos e cupons em categorias como vestuário, eletrônicos, itens domésticos e muito mais.
Deference to author, some superb entropy.
Very good written article. It will be beneficial to everyone who utilizes it, including me. Keep up the good work – i will definitely read more posts.
I really appreciate this post. I’ve been looking everywhere for this! Thank goodness I found it on Bing. You have made my day! Thx again!
Hi there! Do you know if they make any plugins to safeguard against hackers? I’m kinda paranoid about losing everything I’ve worked hard on. Any suggestions?
I like what you guys are up also. Such smart work and reporting! Carry on the superb works guys I?¦ve incorporated you guys to my blogroll. I think it will improve the value of my site 🙂
I’d incessantly want to be update on new content on this website , saved to fav! .
Currently it sounds like WordPress is the top blogging platform out there right now. (from what I’ve read) Is that what you are using on your blog?
Appreciate it for this wondrous post, I am glad I found this internet site on yahoo.
Saved as a favorite, I really like your blog!
I will right away grab your rss as I can not find your email subscription link or newsletter service. Do you have any? Please let me know so that I could subscribe. Thanks.
Your place is valueble for me. Thanks!…
I went over this web site and I believe you have a lot of great info , saved to fav (:.
Absolutely indited content, Really enjoyed reading.
Really enjoyed this post, can I set it up so I get an email sent to me when you publish a fresh post?
Duatoto link alternatif | link login dan daftar duatoto
Link alternatif duatoto resmi internasional.
Thanks for helping out, great info. «A man will fight harder for his interests than for his rights.» by Napoleon Bonaparte.
DUATOTO – Situs Togel Pasaran Terlengkap Pasti Bayar
DUATOTO: Bandar Togel Online Pasti JP 2024
Youre so cool! I dont suppose Ive learn anything like this before. So nice to find any person with some authentic ideas on this subject. realy thanks for starting this up. this web site is one thing that is needed on the internet, somebody with a little bit originality. helpful job for bringing something new to the web!
Hello there! Do you use Twitter? I’d like to follow you if that would be okay. I’m definitely enjoying your blog and look forward to new updates.
DUATOTO – Situs Slot Gacor Resmi Terpercaya di Indonesia
The subsequent time I read a weblog, I hope that it doesnt disappoint me as a lot as this one. I imply, I do know it was my option to read, but I actually thought youd have something fascinating to say. All I hear is a bunch of whining about one thing that you may repair in case you werent too busy on the lookout for attention.
Cool blog! Is your theme custom made or did you download it from somewhere? A theme like yours with a few simple adjustements would really make my blog shine. Please let me know where you got your design. Thanks
It’s a shame you don’t have a donate button! I’d definitely donate to this excellent blog! I guess for now i’ll settle for book-marking and adding your RSS feed to my Google account. I look forward to fresh updates and will share this site with my Facebook group. Talk soon!
I like this post, enjoyed this one regards for putting up.
This is really interesting, You’re a very skilled blogger. I’ve joined your rss feed and look forward to seeking more of your wonderful post. Also, I have shared your website in my social networks!
I believe this internet site has some real superb info for everyone :D. «Calamity is the test of integrity.» by Samuel Richardson.
Yay google is my world beater assisted me to find this great web site! .
Hi there! Do you know if they make any plugins to safeguard against hackers? I’m kinda paranoid about losing everything I’ve worked hard on. Any suggestions?
Definitely, what a splendid blog and illuminating posts, I will bookmark your website.All the Best!
I will right away grab your rss feed as I can’t find your e-mail subscription link or e-newsletter service. Do you’ve any? Kindly let me know so that I could subscribe. Thanks.
I got what you mean , appreciate it for putting up.Woh I am happy to find this website through google.
Helpful info. Lucky me I found your site unintentionally, and I’m stunned why this twist of fate didn’t happened earlier! I bookmarked it.
Perfectly written content, Really enjoyed looking at.
Perfectly composed articles, Really enjoyed looking through.
This really answered my problem, thank you!
I dugg some of you post as I cerebrated they were very helpful very useful
Its fantastic as your other posts : D, thanks for posting. «History is a pact between the dead, the living, and the yet unborn.» by Edmund Burke.
Hi there just wanted to give you a quick heads up. The text in your article seem to be running off the screen in Firefox. I’m not sure if this is a format issue or something to do with internet browser compatibility but I figured I’d post to let you know. The style and design look great though! Hope you get the problem solved soon. Many thanks
I dugg some of you post as I cerebrated they were very useful very useful
Thanks a bunch for sharing this with all of us you really know what you are talking about! Bookmarked. Kindly also visit my website =). We could have a link exchange agreement between us!
You are my inspiration, I own few web logs and rarely run out from post :). «Follow your inclinations with due regard to the policeman round the corner.» by W. Somerset Maugham.
F*ckin’ amazing issues here. I’m very satisfied to look your post. Thanks so much and i am looking ahead to contact you. Will you kindly drop me a mail?
I really appreciate this post. I’ve been looking everywhere for this! Thank goodness I found it on Bing. You have made my day! Thanks again!
I am often to blogging and i really appreciate your content. The article has really peaks my interest. I am going to bookmark your site and keep checking for new information.
I like this post, enjoyed this one regards for putting up.
Oh my goodness! an amazing article dude. Thank you Nonetheless I’m experiencing concern with ur rss . Don’t know why Unable to subscribe to it. Is there anybody getting equivalent rss drawback? Anyone who is aware of kindly respond. Thnkx
I¦ll right away snatch your rss as I can’t find your email subscription hyperlink or newsletter service. Do you have any? Kindly let me recognise in order that I may subscribe. Thanks.
Hiya, I am really glad I’ve found this information. Today bloggers publish only about gossips and web and this is actually irritating. A good blog with exciting content, this is what I need. Thanks for keeping this site, I’ll be visiting it. Do you do newsletters? Can’t find it.
Hiya, I’m really glad I’ve found this information. Today bloggers publish only about gossips and web and this is really irritating. A good site with exciting content, this is what I need. Thank you for keeping this website, I’ll be visiting it. Do you do newsletters? Cant find it.
This is a very good tips especially to those new to blogosphere, brief and accurate information… Thanks for sharing this one. A must read article.
I like this blog very much, Its a rattling nice spot to read and get information. «You have to lead people gently toward what they already know is right.» by Philip.
I genuinely enjoy studying on this website, it contains great articles. «And all the winds go sighing, For sweet things dying.» by Christina Georgina Rossetti.
Hello. excellent job. I did not expect this. This is a remarkable story. Thanks!
Hello there, I found your blog via Google while searching for a related topic, your web site came up, it looks good. I have bookmarked it in my google bookmarks.
Yeah bookmaking this wasn’t a speculative determination great post! .
Thank you for helping out, excellent info. «Job dissatisfaction is the number one factor in whether you survive your first heart attack.» by Anthony Robbins.
Yeah bookmaking this wasn’t a high risk conclusion outstanding post! .
I’ve read a few good stuff here. Certainly worth bookmarking for revisiting. I wonder how much effort you put to create such a great informative site.
Oh my goodness! an amazing article dude. Thanks Nonetheless I am experiencing problem with ur rss . Don’t know why Unable to subscribe to it. Is there anyone getting similar rss drawback? Anyone who knows kindly respond. Thnkx
Youre so cool! I dont suppose Ive learn anything like this before. So good to seek out somebody with some authentic thoughts on this subject. realy thanks for beginning this up. this web site is one thing that is wanted on the web, someone with a bit of originality. useful job for bringing one thing new to the internet!