Multiple vulnerabilities in QNAP QuTScloud Netatalk
| Risk | High |
| Patch available | NO |
| Number of vulnerabilities | 7 |
| CVE-ID | CVE-2021-31439 CVE-2022-23121 CVE-2022-23123 CVE-2022-23122 CVE-2022-23125 CVE-2022-23124 CVE-2022-0194 |
| CWE-ID | CWE-122 CWE-755 CWE-125 CWE-121 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
QuTScloud Operating systems & Components / Operating system |
| Vendor | QNAP Systems, Inc. |
Security Bulletin
This security bulletin contains information about 7 vulnerabilities.
1) Heap-based buffer overflow
EUVDB-ID: #VU52802
Risk: Medium
CVSSv4.0: 6.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2021-31439
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the processing of DSI structures in Netatalk. A remote attacker on the local network can trigger heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Improper Handling of Exceptional Conditions
EUVDB-ID: #VU61620
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-23121
CWE-ID:
CWE-755 - Improper Handling of Exceptional Conditions
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary commands on the target system.
The vulnerability exists due to improper handling of exceptional conditions in the parse_entries function when parsing AppleDouble entries. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Out-of-bounds read
EUVDB-ID: #VU61621
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-23123
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in the getdirparams method. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Stack-based buffer overflow
EUVDB-ID: #VU61618
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-23122
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the setfilparams function. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Stack-based buffer overflow
EUVDB-ID: #VU61619
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-23125
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the copyapplfile function. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Out-of-bounds read
EUVDB-ID: #VU61622
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2022-23124
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition in the get_finderinfo method. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Stack-based buffer overflow
EUVDB-ID: #VU61617
Risk: High
CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2022-0194
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the ad_addcomment function. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationCybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsQuTScloud: c5.0.0.1919 20220119 - c5.0.1.1998 20220408
CPE2.3- cpe:2.3:o:qnap_systems:qutscloud:c5.0.0.1919 20220119:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1949 20220218:*:*:*:*:*:*:*
- cpe:2.3:o:qnap_systems:qutscloud:c5.0.1.1998 20220408:*:*:*:*:*:*:*
https://www.qnap.com/en/security-advisory/qsa-22-12
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
