CVE-2022-49040 - Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors

Back Back to CVE browser

MEDIUM

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors

Published Sep 26, 2024

4.4

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors.

Affected products

Vendor Synology Product Synology Drive Client Default
affected
Affected
- < 3.5.0-16084

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Synology	Synology Drive Client	affected	Affected < 3.5.0-16084

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53882
Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_10
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-53882		Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_10		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner synology

Published Sep 26, 2024

Updated Sep 26, 2024

Reserved Sep 24, 2024

Link CVE-2022-49040

CISA Vulnrichment

Updated Sep 26, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2022-49040

Red Hat

No data

ENISA EUVD

Assigner synology

Published Sep 26, 2024

Updated Sep 26, 2024

Link EUVD-2022-53882

GitHub

No data