A buffer copy without checking size of input...
Moderate severity
Unreviewed
Published
Apr 26, 2024
to the GitHub Advisory Database
•
Updated Apr 26, 2024
Description
Published by the National Vulnerability Database
Apr 26, 2024
Published to the GitHub Advisory Database
Apr 26, 2024
Last updated
Apr 26, 2024
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later
References