Input validation

2023-12-0816:15:00

PRIOn knowledge base

www.prio-n.com

input validation

buffer copy

os vulnerability

qnap

version fix

authenticated administrators

code execution

network vulnerability

nvd

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.9%

JSON

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.2.2534 build 20230927 and later

CPENameOperatorVersion
qtseq5.1.0.2348 build-20230325
qtseq5.1.0.2418 build-20230603
qtseq5.1.0.2399 build-20230515
qtseq5.1.0.2466 build-20230721
qtseq5.1.1.2491 build-20230815
qtseq5.1.0.2444 build-20230629
qtseq5.0.1.2346 build-20230322
qtseq5.0.1.2277 build-20230112
qtseq5.0.1.2248 build-20221215
qtseq5.0.1.2234 build-20221201

Name	Operator	Version
qts	eq	5.1.0.2348 build-20230325
qts	eq	5.1.0.2418 build-20230603
qts	eq	5.1.0.2399 build-20230515
qts	eq	5.1.0.2466 build-20230721
qts	eq	5.1.1.2491 build-20230815
qts	eq	5.1.0.2444 build-20230629
qts	eq	5.0.1.2346 build-20230322
qts	eq	5.0.1.2277 build-20230112
qts	eq	5.0.1.2248 build-20221215
qts	eq	5.0.1.2234 build-20221201