Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-51368 EUVD-2023-56089GHSA-rvfh-6hc5-7vqc

QTS, QuTS hero

Published Sep 6, 2024 · Updated Sep 6, 2024 · Assigned by qnap

Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service (DoS) attack via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QTS 5.1.x – < 5.1.6.2722 build 20240402 5.1.6.2722 build 20240402
QNAP Systems QuTS hero h5.1.x – < h5.1.6.2734 build 20240414 h5.1.6.2734 build 20240414

References