CVE-2024-37048

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37046

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-52802

RIOT-OS CVE-2024-52802 affects RIOT 2024.04 and prior, where _parse_advertise and its caller _preparse_advertise in sys/net/application_layer/dhcpv6/client.c lack a minimum header length check for dhcpv6_opt_t after processing dhcpv6_msg_t, enabling an out-of-bounds read and causing system incons...

CVE-2024-37041

CVE-2024-37041 describes a buffer copy without input size checking that affects QNAP QTS and QuTS hero. Specifically, vulnerable in older QTS/QuTS versions prior to the fixed builds, with the issue enabling an attacker who has gained admin access to execute code remotely via a network vector. The...

CVE-2024-37041 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37042 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37042

CVE-2024-37042 affects QNAP QTS and QuTS hero. A NULL pointer dereference vulnerability could allow remote attackers with administrator access to trigger a DoS. Affected versions include QTS before 5.2.1.2930 and QuTS hero before h5.2.1.2929; the issue is fixed in QTS 5.2.1.2930 build 20241025 an...

CVE-2024-37042 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37043 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-37043 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-37044 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37045

CVE-2024-37045 affects QNAP QTS and QuTS hero. A NULL pointer dereference could allow remote attackers with administrator access to cause a DoS. The issue has been fixed in QTS 5.2.1.2930 build 20241025 and later, and in QuTS hero h5.2.1.2929 build 20241025 and later. If you rely on these product...

CVE-2024-37045 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37045 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37048

CVE-2024-37048 is a NULL pointer dereference in QNAP QTS and QuTS hero. Affected are QTS 5.2.1.2930 build 20241025 and later, and QuTS hero h5.2.1.2929 build 20241025 and later. Impact is denial-of-service (DoS) via remote access with admin privileges; no user interaction required. Fixed in the s...

CVE-2024-37048 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37049 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37049 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37050 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-50396

CVE-2024-50396 describes a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. Concrete details in connected sources show impact on several QNAP OS versions and that a fix has been applied in QTS 5.2.1.2930 build 20241025 and later and QuTS hero h5.2.1.2929 ...