An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later
| Software | From | Fixed in |
|---|---|---|
| qnap / qts | 4.5.1 | 4.5.4.2280 |
| qnap / qts | 5.0.0 | 5.0.1.2277 |
| qnap / qts | 4.5.4.2280 | 4.5.4.2280.x |
| qnap / qts | 5.0.1.2277 | 5.0.1.2277.x |
| qnap / quts_hero | h4.5.1 | h4.5.4.2374 |
| qnap / quts_hero | h5.0 | h5.0.1.2277 |
| qnap / quts_hero | h4.5.4.2374 | h4.5.4.2374.x |
| qnap / quts_hero | h5.0.1.2277 | h5.0.1.2277.x |
| qnap / qutscloud | c5.0.1 | c5.0.1.2374 |