Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346

A stack buffer overflow vulnerability in QNAP NVR Storage Expansion (pre-1.0.6) can allow remote arbitrary code execution. Fix: upgrade to NVR Storage Expansion 1.0.6 or later (2021-08-03). CVSS/metrics indicate network access, no authentication, and high impact to confidentiality, integrity, and...

CVE-2021-34345

CVE-2021-34345 affects QNAP NVR Storage Expansion: a stack buffer overflow in the NVR Storage Expansion component could allow arbitrary code execution. A fix was released in version 1.0.6 (and later) of NVR Storage Expansion.

CVE-2021-34344 Stack Buffer Overflow Vulnerability in QUSBCam2

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

CVE-2021-34344

CVE-2021-34344 is a stack buffer overflow affecting QNAP QUSBCam2 used on NAS devices. The issue allows arbitrary code execution when exploited via the affected service. Affected versions and fixes are specified across multiple QNAP platforms: QTS 4.5.4: QUSBCam2 1.1.4 (from 2021-07-30) and later...

CVE-2021-34343

CVE-2021-34343 describes a stack buffer overflow affecting QNAP devices running QTS, QuTScloud, and QuTS hero . The vulnerability could allow an attacker to execute arbitrary code. Affected releases have been fixed in: QTS 4.5.4.1715 build 20210630 and later , QTS 5.0.0.1716 build 20210701 and la...

CVE-2021-34343 Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

CVE-2021-28816

CVE-2021-28816 is a stack-based buffer overflow affecting QNAP QTS, QuTScloud, and QuTS hero. The vulnerability could allow arbitrary code execution if exploited. Affected QTS/QuTS versions fixed include QTS 4.5.4.1715 build 20210630 and later, QTS 5.0.0.1716 build 20210701 and later, QTS 4.3.3.1...

CVE-2021-28816 Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

CVE-2021-34345: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34346: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage...

CVE-2021-34344: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

CVE-2021-34343: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

CVE-2021-28816: Out-of-bounds Write

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

PT-2021-4716

Name of the Vulnerable Software and Affected Versions QUSBCam2 versions prior to 1.1.4 QUSBCam2 versions prior to 2.0.1 Description A stack buffer overflow issue has been reported to affect QNAP devices running QUSBCam2, allowing attackers to execute arbitrary code if exploited. Recommendations F...

PT-2021-20466

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

PT-2021-20465

Name of the Vulnerable Software and Affected Versions: NVR Storage Expansion versions prior to 1.0.6 Description: A stack buffer overflow issue has been reported, allowing attackers to execute arbitrary code if exploited. Recommendations: For versions prior to 1.0.6, update to NVR Storage Expansi...

PT-2021-4459

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.5.4.1715 build 20210630 QTS versions prior to 5.0.0.1716 build 20210701 QuTScloud versions prior to c4.5.6.1755 QuTS hero versions prior to h4.5.4.1771 build 20210825 Description A stack buffer overflow issue has been...

PT-2021-21208

Name of the Vulnerable Software and Affected Versions Dell iDRAC 9 versions prior to 4.40.40.00 Dell iDRAC 8 versions prior to 2.80.80.80 Check Point GAiA affected versions not specified Description The issue is a Stack Buffer Overflow in Racadm, which can be exploited by an authenticated remote...

PT-2021-4460

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.3.3.1693 build 20210624 QTS versions prior to 4.3.6.1750 build 20210730 QTS versions prior to 4.5.4.1715 build 20210630 QTS versions prior to 5.0.0.1716 build 20210701 QuTScloud versions prior to c4.5.6.1755 QuTS hero...