CVE-2024-32763

qnap qts, qnap quts hero

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-32763

Katalog CVE

CVSS 8.8 · High EPSS 0,58%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada qnap qts, qnap quts hero. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later

Rincian

Terbit di NVD
6 September 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-122: Heap-based Buffer Overflow
EPSS (30 hari)
0,58% peluang dieksploitasi; lebih tinggi dari 45,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap qts Versi 5.1.0.2348 build_20230325
qnap qts Versi 5.1.0.2399 build_20230515
qnap qts Versi 5.1.0.2418 build_20230603
qnap qts Versi 5.1.0.2444 build_20230629
qnap qts Versi 5.1.0.2466 build_20230721
qnap qts Versi 5.1.1.2491 build_20230815
qnap qts Versi 5.1.2.2533 build_20230926
qnap qts Versi 5.1.3.2578 build_20231110
qnap qts Versi 5.1.4.2596 build_20231128
qnap qts Versi 5.1.5.2645 build_20240116
qnap qts Versi 5.1.5.2679 build_20240219
qnap qts Versi 5.1.6.2722 build_20240402
qnap qts Versi 5.1.7.2770 build_20240520
qnap quts hero Versi h5.1.0.2409 build_20230525
qnap quts hero Versi h5.1.0.2424 build_20230609
qnap quts hero Versi h5.1.0.2453 build_20230708
qnap quts hero Versi h5.1.0.2466 build_20230721
qnap quts hero Versi h5.1.1.2488 build_20230812
qnap quts hero Versi h5.1.2.2534 build_20230927
qnap quts hero Versi h5.1.3.2578 build_20231110
qnap quts hero Versi h5.1.4.2596 build_20231128
qnap quts hero Versi h5.1.5.2647 build_20240118
qnap quts hero Versi h5.1.5.2680 build_20240220
qnap quts hero Versi h5.1.6.2734 build_20240414
qnap quts hero Versi h5.1.7.2770 build_20240520
qnap quts hero Versi h5.1.7.2788 build_20240607
qnap quts hero Versi h5.1.7.2794 build_20240613

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.