CVE-2023-41279 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41278

CVE-2023-41278 affects multiple QNAP platforms (QTS, QuTS hero, QuTScloud): a buffer copy without input size checking could allow an authenticated administrator to execute code over the network. The issue has been fixed in QTS 5.1.2.2533+ (build 20230926+), QuTS hero h5.1.2.2534+ (build 20230927+...

CVE-2023-41278 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41277 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41277

CVE-2023-41277 is a buffer copy vulnerability in QNAP QTS/QuTS products. Affected: QTS 5.1.2.2533 build 20230926 and later; QuTS hero h5.1.2.2534 build 20230927 and later; QuTScloud c5.1.5.2651 and later. Root cause: a buffer copy without checking input size. Impact: remotely exploitable by an au...

CVE-2023-41276 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41276

CVE-2023-41276 describes a buffer copy without input size validation that affects multiple QNAP OS lines. Affected products include QTS, QuTS hero, and QuTScloud. The underlying issue allows an authenticated administrator to execute code over the network. Fixed in QTS 5.1.2.2533+ (build 20230926+...

CVE-2023-41276 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41275

CVE-2023-41275 describes a buffer-copy vulnerability in QNAP OSes that allows an authenticated administrator to execute code over the network due to input size mischecking. Affected products include QTS (versions prior to 5.1.2.2533), QuTS hero, and QuTScloud. The underlying root cause is a buffe...

CVE-2023-41275 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41275 QTS, QuTS hero, QuTScloud

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-41274 QTS, QuTS hero, QuTScloud

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following...

CVE-2023-41274 QTS, QuTS hero, QuTScloud

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following...

CVE-2023-41274

An authenticated administrator could trigger a NULL pointer dereference in QNAP’s QTS/QuTS software, allowing a network-based DoS. Affected products include QTS, QuTS hero, and QuTScloud; fixed in QTS 5.1.2.2533 build 20230926 and later, QuTS hero h5.1.2.2534 build 20230927 and later, and QuTSclo...

CVE-2023-41273 QTS, QuTS hero, QuTScloud

A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533...

CVE-2023-41273

CVE-2023-41273 is a heap-based buffer overflow affecting several QNAP OS lines (QTS, QuTS hero, QuTScloud). The vulnerability allows an authenticated administrator to execute code over the network. Affected/fixed versions include QTS 5.1.2.2533 build 20230926 and later; QuTS hero h5.1.2.2534 buil...

CVE-2023-41273 QTS, QuTS hero, QuTScloud

A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533...

CVE-2023-39303 QTS, QuTS hero, QuTScloud

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

CVE-2023-39303 QTS, QuTS hero, QuTScloud

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

CVE-2023-39303

CVE-2023-39303 describes an improper authentication vulnerability in QNAP OSes (QTS, QuTS hero, QuTScloud) that could allow network-based compromise of the system. Affected products include QTS 5.1.3.2578+ (build 20231110 and later), QuTS hero h5.1.3.2578+ (build 20231110 and later), and QuTSclou...