A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
qnap qts 5.1.0.2348 |
||
qnap qts 5.1.0.2418 |
||
qnap qts 5.1.0.2399 |
||
qnap qts 5.1.0.2466 |
||
qnap qts 5.1.1.2491 |
||
qnap qts 5.1.0.2444 |
||
qnap qts 5.1.3.2578 |
||
qnap qts 5.1.2.2533 |
||
qnap quts hero h5.1.0.2409 |
||
qnap quts hero h5.1.1.2488 |
||
qnap quts hero h5.1.0.2466 |
||
qnap quts hero h5.1.0.2453 |
||
qnap quts hero h5.1.0.2424 |
||
qnap quts hero h5.1.3.2578 |
||
qnap quts hero h5.1.2.2534 |
Vulmon