CVE-2023-23363: QTS
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors.
We have already fixed the vulnerability in the following versions: QTS 4.3.6.2441 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-23363.
Which operating system is affected by the vulnerability?
The QNAP operating system is affected by this vulnerability.
What is the severity of CVE-2023-23363?
The severity of CVE-2023-23363 is critical with a score of 9.8.
How can this vulnerability be exploited?
If exploited, the vulnerability allows remote users to execute code via unspecified vectors.
Has the vulnerability been fixed?
Yes, the vulnerability has been fixed in QTS 4.3.6.2441 and later versions.