Description
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2277 and later
QTS 4.5.4.2280 build 20230112 and later
QuTS hero h5.0.1.2277 build 20230112 and later
QuTS hero h4.5.4.2374 build 20230417 and later
QuTScloud c5.0.1.2374 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QTS | 5.0.x – < 5.0.1.2277, 4.5.x – < 4.5.4.2280 build 20230112 | 5.0.1.2277 |
| QNAP Systems | QuTS hero | h5.0.x – < h5.0.1.2277 build 20230112, h4.5.x – < h4.5.4.2374 build 20230417 | h5.0.1.2277 build 20230112 |
| QNAP Systems | QuTScloud | c5.x.x – < c5.0.1.2374 | c5.0.1.2374 |
Advisories 1
- WID-SEC-2023-1907 QNAP NAS: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 27, 2023