漏洞标题
Stack Overflow漏洞在QVR Elite、QVR Pro和QVR Guard中的表现
漏洞描述信息
QVR Elite、QVR Pro和QVR Guard的Stack Overflow漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
漏洞描述信息
A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QuTS hero h4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 5.0.0: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 4.5.4: QVR Guard 2.1.3.0 and later QTS 5.0.0: QVR Guard 2.1.3.0 and later
CVSS信息
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
漏洞标题
Qnap Qvr缓冲区错误漏洞
漏洞描述信息
Qnap Qvr是中国威联通科技（Qnap）公司的一个Qnap监控系统控制中心。 QVR 多款产品存在安全漏洞，该漏洞源于一个堆栈缓冲区溢出漏洞会影响运行 QVR Elite、QVR Pro、QVR Guard 的 QNAP 设备。 如果被利用，此漏洞允许攻击者执行任意代码。
CVSS信息
N/A
漏洞类别
缓冲区错误