CVE-2019-9513

CVE-2019-9513 (and related HTTP/2 CVEs) affect nginx and nghttp2. The issues enable denial of service via HTTP/2 resource loops and priority/window manipulation, causing high CPU/memory usage. nginx 1.16.x and nghttp2 are specifically named in advisories; remediation is upgrading to fixed package...

CVE-2019-9517

CVE-2019-9517 describes an attack against some HTTP/2 implementations where unconstrained internal data buffering can cause a denial of service. The vulnerability arises when an attacker floods a connection with a large number of requests for a large response object while manipulating HTTP/2 flow...

CVE-2021-3156

CVE-2021-3156 is a heap-based buffer overflow in sudo that enables privilege escalation to root. The issue arises in the argument parsing path and is exploitable via commands using sudoedit -s with a trailing backslash, leading to memory corruption. Affected release information in the provided do...

CVE-2019-9511

CVE-2019-9511 is an HTTP/2 denial-of-service issue observed in multiple products where an attacker manipulates HTTP/2 window size and stream prioritization to force queuing of data in 1-byte chunks, potentially exhausting CPU/memory. Connected advisories confirm affected components include nginx ...

CVE-2019-9516

CVE-2019-9516 is an HTTP/2 header leak vulnerability affecting nginx and several Linux distributions. The issue occurs when an attacker sends streams with 0-length header names and values (optionally Huffman encoded), causing nginx to allocate memory for headers that may be kept until the session...

CVE-2021-44142

The CVE-2021-44142 issue is in the Samba vfs_fruit module. It allows out-of-bounds heap read/write via specially crafted extended file attributes (xattrs) when vfs_fruit is configured on Samba versions older than 4.13.17, 4.14.12, and 4.15.5. A remote attacker with write access to xattrs can exec...

CVE-2017-5753

CVE-2017-5753 is part of the Spectre family (Variant 1) described in the SPECTRE_MELTDOWN_ADVISORY: it involves speculative execution and a bounds-check bypass that can enable an unprivileged attacker to read privileged memory via cache timing analysis. IBM’s AIX/VIOS advisories and iFixes addres...

CVE-2019-9514

CVE-2019-9514 corresponds to an HTTP/2 vulnerability where an attacker floods a peer by sending HEADERS frames, causing unbounded memory growth and potential DoS. Public details in connected advisories show affected stacks include Go HTTP/2 implementations and Go-based tools, with remediation via...

CVE-2017-14491

CVE-2017-14491 : Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to crash the service or potentially execute arbitrary code via a crafted DNS response. Affected component: dnsmasq. Root cause described as a heap overflow in the DNS reply-building path. Public details in ...

CVE-2018-1160

Netatalk before 3.1.12 is vulnerable to an out-of-bounds write in dsi_opensess.c due to missing bounds checking on attacker-controlled data. A remote unauthenticated attacker could achieve arbitrary code execution (potentially with root privileges). Public exploit activity exists (authentication ...

CVE-2019-9518

CVE-2019-9518 describes a denial-of-service risk in HTTP/2 where a flood of frames with empty payloads (DATA, HEADERS, CONTINUATION, PUSH_PROMISE) and no end-of-stream flag can exhaust CPU and memory. Connected docs confirm concrete mentions across multiple ecosystems: Cloud Foundry products (emp...

CVE-2019-9515

CVE-2019-9515 concerns an HTTP/2 settings flood that can cause memory/CPU exhaustion. Arista’s security advisory (Security Advisory 0043) states the vulnerability is in Go’s gRPC HTTP/2 usage and can affect TerminAttr, OpenConfig, CVP, and certain Wi‑Fi OpenConfig-enabled components when enabled....

CVE-2018-8897

CVE-2018-8897 covers a Linux kernel issue where a mishandled debug exception after MOV SS/POP SS can lead to a local privilege escalation or kernel crash. The vulnerability arises from how the kernel handles stack-switch sequencing and interrupts, potentially enabling privilege escalation in some...

CVE-2019-14907

Summary (CVE-2019-14907) : Samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12, and 4.11.x before 4.11.5 have a flaw where, if log level is set to 3 or higher, a client string obtained after a failed character conversion can be printed during NTLMSSP negotiation. In the Samba AD DC this may...

CVE-2024-10441

CVE-2024-10441 affects Synology BeeStation OS (BSM) and DiskStation Manager (DSM). The vulnerability is described as an improper encoding or escaping of output in the system plugin daemon, affecting BSM <= 1.1-65374 and DSM

CVE-2019-19344

CVE-2019-19344 affects Samba 4.9.x (before 4.9.18), 4.10.x (before 4.10.12), and 4.11.x (before 4.11.5). The issue is a use-after-free caused by a realloc() call while other local variables still reference the original buffer, impacting Samba AD DC DNS zone scavenging. Connected advisories confir...

CVE-2018-7185

CVE-2018-7185 affects ntp protocol engine in ntp 4.2.6 before 4.2.8p11, where a remote attacker can send crafted packets with a zero-origin timestamp and the source IP of the other side of an interleaved association to cause the victim ntpd to reset its association, producing a denial of service....

CVE-2018-7184

CVE-2018-7184 affects ntpd 4.2.8p4 through 4.2.8p10, where a zero-origin timestamp in certain packets can disrupt the association and cause DoS. This is described as a result of an incomplete fix for CVE-2015-7704. Remediation available: upgrade to ntpd 4.2.8p11 or later; several advisories (e.g....

CVE-2018-7170

CVE-2018-7170 affects ntp’s ntpd component in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92. An authenticated attacker who knows a private symmetric key can create many ephemeral associations to win the clock selection (Sybil attack) and modify a victim’s clock. The issue arises from an incomp...

CVE-2021-27647

The CVE-2021-27647 issue affects Synology DiskStation Manager (DSM) before 6.2.3-25426-3, in the iscsi_snapshot_comm_core module. It is an out-of-bounds read that allows remote attackers to execute arbitrary code via crafted web requests. Affected software is DSM, with the root cause described as...

CVE-2021-31439

CVE-2021-31439 affects Netatalk components used by Synology DiskStation Manager. The flaw arises in the processing of DSI structures where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling network-adjacent attackers to execute arbitrary cod...

CVE-2015-2809

Summary: Multiple connected advisories confirm a vulnerability related to the Avahi daemon (unrelated to DSM CVE-2015-2809) where Avahi through 0.6.x/0.7.x replies to IPv6 unicast queries with non on-link source addresses, enabling remote DoS (traffic amplification) and potentially information le...

CVE-2025-1021

CVE-2025-1021 affects Synology DiskStation Manager (DSM) via the synocopy component. The issue is a missing authorization vulnerability that allows remote attackers to read arbitrary files through unspecified vectors. Affected DSM versions are prior to 7.1.1-42962-8, 7.2.1-69057-7, and 7.2.2-7280...

CVE-2013-6955

Summary of CVE-2013-6955 – Synology DiskStation Manager Affected product: Synology DiskStation Manager (DSM) with webman/imageSelector.cgi as part of the File Station component. Vulnerability: Remote code execution via SLICEUPLOAD. An attacker can append data to an arbitrary file by sending a spe...

CVE-2023-2729

CVE-2023-2729 affects Synology DiskStation Manager (DSM) prior to 7.2-64561, where the user management functionality relies on insufficiently random values, enabling remote attackers to obtain user credentials via unspecified vectors. Root cause: weak randomness in PRNG construction during admin ...

CVE-2017-15889

CVE-2017-15889 is a command injection vulnerability in Synology DiskStation Manager (DSM) smart.cgi that affects DSM versions prior to 5.2-5967-5. An authenticated remote attacker can inject commands via the disk field, potentially executing arbitrary commands with root privileges. Public details...

CVE-2022-22680

The CVE-2022-22680 issue affects Synology DiskStation Manager (DSM) Web Server prior to version 7.0.1-42218-2, causing exposure of sensitive information to unauthorized actors via unspecified vectors. The vulnerability is classified with CVSS scores up to 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N ...

CVE-2019-3870

CVE-2019-3870 affects Samba 4.9 (inclusive) through 4.9.5, and 4.10.x up to 4.10.2. During new Samba AD DC creation, a private install subdirectory (often 0700) may be left with looser permissions (e.g., 0755) after upgrades. Within this directory, files are created with mode 0666, making sensiti...

CVE-2021-26562

This CVE affects Synology DiskStation Manager (DSM) prior to version 6.2.3-25426-3, specifically the synoagentregisterd/server finder component. The root cause is an out-of-bounds write triggered by a crafted syno_finder_site HTTP header, exploited via MITM to potentially execute arbitrary code. ...

CVE-2021-26569

CVE-2021-26569 describes a race-condition vulnerability in the iscsi_snapshot_comm_core component of Synology DiskStation Manager (DSM) versions prior to 6.2.3-25426-3. A remote attacker can trigger arbitrary code execution via crafted web requests, with impact evidenced as remote code execution ...

CVE-2021-26566

CVE-2021-26566 affects Synology DiskStation Manager (DSM) via the synorelayd component, where a vulnerability prior to DSM 6.2.3-25426-3 allows a remote attacker to induce insertion of sensitive information into outbound data through inbound QuickConnect traffic, enabling a man‑in‑the‑middle to e...

CVE-2021-27646

CVE-2021-27646 affects Synology DiskStation Manager (DSM) via the iscsi_snapshot_comm_core component. The vulnerability is a Use After Free that enables remote attackers to execute arbitrary code through crafted web requests on DSM versions prior to 6.2.3-25426-3. The issue is rated high/critical...

CVE-2022-27622

The CVE-2022-27622 entry concerns Synology DiskStation Manager (DSM) with a Server-Side Request Forgery (SSRF) in the Package Center before version 7.1-42661. Affected component: DSM Package Center; root cause: SSRF allowing remote authenticated users to access intranet resources via unspecified ...

CVE-2022-27626

CVE-2022-27626 is a race-condition vulnerability in Synology DiskStation Manager (DSM) OOB Management session processing. The issue arises from concurrent execution using improperly synchronized shared resources, allowing remote attackers to execute arbitrary commands via unspecified vectors. Aff...

CVE-2022-22687

CVE-2022-22687 is a buffer overflow in the Authentication component of Synology DiskStation Manager (DSM) prior to 6.2.3-25426-3. The issue (classic buffer overflow) allows remote attackers to execute arbitrary code via unspecified vectors. Exploitation details are not provided in the connected d...

CVE-2022-27610

The CVE-2022-27610 entry describes a path traversal vulnerability in the webapi component of Synology DiskStation Manager (DSM) prior to 6.2.3-25423. The flaw allows remote authenticated users to delete arbitrary files via unspecified vectors, due to improper limitation of a pathname to a restric...

CVE-2021-26563

CVE-2021-26563 affects Synology DiskStation Manager (DSM) with the synoagentregisterd component, prior to DSM 6.2.4-25553. The root cause is an incorrect/improper access control that allows local users to execute arbitrary code via unspecified vectors, potentially enabling root access. In TALOS-2...

CVE-2021-26567

Summary: CVE-2021-26567 is a stack-based buffer overflow in the FAAD2 decoder (frontend/main.c) of faad2 prior to 2.2.7.1. The vulnerability allows a local attacker to execute arbitrary code via crafted filename and pathname options. Affected context is mainly Synology DiskStation Manager (faad2 ...

CVE-2021-26561

Synology DSM 6.2.x contains a stack-based out-of-bounds write flaw in the synoagentregisterd/server finder path (syno_finder_site handling) that can be triggered via a malicious HTTP response from a MITM attacker. TALOS-2020-1159 describes an out-of-bounds write in synoagentregisterd’s finder fun...

CVE-2021-26564

CVE-2021-26564 is a vulnerability in Synology DiskStation Manager (DSM) due to cleartext transmission in the synorelayd component prior to version 6.2.3-25426-3. The flaw allows man-in-the-middle attackers to spoof servers via an HTTP session, exposing sensitive information. Connected sources ali...

CVE-2013-6987

Synology DiskStation Manager

CVE-2021-29083

Synology DSM vulnerability CVE-2021-29083 affects DSM versions prior to 6.2.3-25426-3, in the SYNO.Core.Network.PPPoE component. The root cause is improper neutralization of special elements in an OS command, allowing remote authenticated users to execute arbitrary code via the realname parameter...

CVE-2021-26560

CVE-2021-26560 affects Synology DiskStation Manager (DSM) prior to 6.2.3-25426-3 via the synoagentregisterd service. The issue involves cleartext HTTP transmission during server discovery (the /finder/server response and subsequent domain parsing), enabling MITM disclosure and server spoofing. TA...

CVE-2022-22688

CVE-2022-22688 is a vulnerability in Synology DiskStation Manager (DSM) File service where improper neutralization of special command elements enables a remote authenticated user to execute arbitrary commands. Affected software: DSM versions prior to 6.2.4-25556-2. Root cause: inadequate filterin...

CVE-2017-9554

Synology DiskStation Manager (DSM) is affected by CVE-2017-9554 via the forget_passwd.cgi endpoint. The vulnerability is an information exposure that allows remote attackers to enumerate valid usernames. Affected firmware versions are DSM prior to 6.1.3-15152. The root cause is information leakag...

CVE-2020-27656

The CVE-2020-27656 issue affects Synology DiskStation Manager (DSM) prior to 6.2.3-25426-2, where cleartext transmission of sensitive information over DDNS can let a man-in-the-middle eavesdrop authentication data for DNSExit. Technical details across sources confirm the affected product (DSM), t...

CVE-2021-26565

Synology DiskStation Manager (DSM) prior to version 6.2.3-25426-3 contains a cleartext transmission vulnerability in synorelayd that can allow MITM attackers to obtain sensitive information via HTTP sessions. The issue affects DSM running on Synology NAS devices and is documented in multiple sour...

CVE-2018-8916

The CVE-2018-8916 issue affects Synology DiskStation Manager (DSM) prior to 6.2-23739. The vulnerability lies in the Change Password function, where remote authenticated users can reset a password without completing verification, due to an unverified password change flow. Impact is described as a...

CVE-2020-27653

CVE-2020-27653 affects Synology SRM (SRM 1.2.x) via QuickConnect. Talos documents an information-disclosure/mitm scenario where an attacker downgrades the VPN/HTTPS channel from HTTPS to HTTP, enabling interception of web traffic and session cookies. Affected versions include SRM 1.2.3 RT2600ac a...

CVE-2021-27649

CVE-2021-27649 affects Synology DiskStation Manager (DSM) via a use-after-free in the DSM File Transfer Protocol component. The vulnerability allows remote code execution on DSM versions prior to 6.2.3-25426-3. Evidence from multiple sources (NVD, CNVD, Tenable OT/OSS plugin references, OpenVAS e...