CVE-2022-49038

The CVE-2022-49038 vulnerability affects Synology Drive Client, where the OpenSSL DLL component allegedly contains functionality from an untrusted control sphere that enables local users to execute arbitrary code via unspecified vectors. Affected software: Synology Drive Client versions prior to ...

CVE-2022-49037

CVE-2022-49037 affects Synology Drive Client before 3.3.0-15082. The vulnerability is an insertion of sensitive information into a log file in the proxy settings component, enabling remote authenticated users to obtain sensitive information via unspecified vectors. Sources from NVD/Red Hat/CVE re...

CVE-2022-49041

Summary: CVE-2022-49041 affects Synology Drive Client prior to version 3.4.0-15721. The issue is a buffer copy without checking input size in the backup task management functionality (a classic buffer overflow). This allows local users with administrator privileges to crash the client via unspeci...

CVE-2022-49040

CVE-2022-49040 affects Synology Drive Client prior to 3.4.0-15721. A buffer copy without size check in the connection management functionality allows local users with administrator privileges to crash the client via unspecified vectors. On fixed versions, upgrade to 3.4.0-15721 or later; exploita...

CVE-2023-52946

CVE-2023-52946 affects Synology Drive Client prior to 3.5.0-16084, specifically the vss service component. The vulnerability is a buffer copy without size check ('Classic Buffer Overflow') that lets a remote attacker overwrite trivial buffers and crash the client via unspecified vectors. Public e...

CVE-2022-49039

Affected software: Synology Drive Client (backup task management). The issue is an out-of-bounds write vulnerability in the backup task management functionality prior to version 3.4.0-15721. Exploitation requires local access with administrator privileges and can allow arbitrary command execution...