QTS, QuTS hero, QuTScloud
Published Feb 2, 2024
7.2
HIGHCVSS 3.1
EPSS 0.56%
Description
A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later
Affected products
-
- Version 5.1.xStatusaffectedConstraints<5.1.2.2533 build 20230926
- Version
-
- Version h5.1.xStatusaffectedConstraints<h5.1.2.2534 build 20230927
- Version
-
- Version c5.x.xStatusaffectedConstraints<c5.1.5.2651
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| QNAP Systems Inc. | QTS | unaffected |
| ||||||
| QNAP Systems Inc. | QuTS hero | unaffected |
| ||||||
| QNAP Systems Inc. | QuTScloud | unaffected |
|
- 5.1.0.2348
- 5.1.0.2399
- 5.1.0.2418
- 5.1.0.2444
- 5.1.0.2466
- 5.1.1.2491
- 5.1.2.2533
- h5.1.0.2409
- h5.1.0.2424
- h5.1.0.2453
- h5.1.0.2466
- h5.1.1.2488
- h5.1.2.2534
- c5.1.0.2498
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later
References (1)
- https://www.qnap.com/en/security-advisory/qsa-23-38 Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://www.qnap.com/en/security-advisory/qsa-23-38 | Vendor Advisory |
Change history (0)
No recorded changes yet.