Test ID:	1.3.6.1.4.1.25623.1.0.149471
Category:	General
Title:	QNAP QTS Multiple Vulnerabilities (QSA-23-02, QSA-23-03, QSA-23-06, QSA-23-10, QSA-23-11, QSA-23-15)
Summary:	QNAP QTS is prone to multiple vulnerabilities.
Description:	Summary: QNAP QTS is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2023-0286, CVE-2022-4304, CVE-2023-0215, CVE-2022-4450: Multiple OpenSSL vulnerabilities - CVE-2023-22809: Vulnerability in sudo - CVE-2023-23355: Authenticated remote code execution (RCE) - CVE-2022-27597, CVE-2022-27598: Authenticated information disclosure - CVE-2022-42898: Buffer overflow in Samba - CVE-2022-3437, CVE-2022-3592: Multiple buffer overflows in Samba Affected Software/OS: QNAP QTS version 5.0.1. Solution: Update to version 5.0.1.2234 build 20230322 or later. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0286 https://security.gentoo.org/glsa/202402-08 1.0.2zg patch (premium) https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=fd2af07dc083a350c959147097003a14a5e8ac4d 1.1.1t git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c6c9d439b484e1ba9830d8454a34fa4f80fdfe9 3.0.8 git commit https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2f7530077e0ef79d98718138716bc51ca0cad658 OpenSSL Advisory https://www.openssl.org/news/secadv/20230207.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.2-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/018_x509.patch.sig Common Vulnerability Exposure (CVE) ID: CVE-2022-4304 Common Vulnerability Exposure (CVE) ID: CVE-2023-0215 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd Common Vulnerability Exposure (CVE) ID: CVE-2022-4450 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=bbcf509bd046b34cca19c766bbddc31683d0858b https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=63bcf189be73a9cc1264059bed6f57974be74a83 Common Vulnerability Exposure (CVE) ID: CVE-2023-22809 Debian Security Information: DSA-5321 (Google Search) https://www.debian.org/security/2023/dsa-5321 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/ http://seclists.org/fulldisclosure/2023/Aug/21 https://security.gentoo.org/glsa/202305-12 http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html http://packetstormsecurity.com/files/172509/Sudoedit-Extra-Arguments-Privilege-Escalation.html http://packetstormsecurity.com/files/174234/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf https://lists.debian.org/debian-lts-announce/2023/01/msg00012.html http://www.openwall.com/lists/oss-security/2023/01/19/1 Common Vulnerability Exposure (CVE) ID: CVE-2023-23355 https://www.qnap.com/en/security-advisory/qsa-23-10 Common Vulnerability Exposure (CVE) ID: CVE-2022-27597 https://www.qnap.com/en/security-advisory/qsa-23-06 Common Vulnerability Exposure (CVE) ID: CVE-2022-27598 Common Vulnerability Exposure (CVE) ID: CVE-2022-42898 https://security.gentoo.org/glsa/202309-06 https://security.gentoo.org/glsa/202310-06 https://bugzilla.samba.org/show_bug.cgi?id=15203 https://web.mit.edu/kerberos/advisories/ Common Vulnerability Exposure (CVE) ID: CVE-2022-3437 https://access.redhat.com/security/cve/CVE-2022-3437 https://bugzilla.redhat.com/show_bug.cgi?id=2137774 https://www.samba.org/samba/security/CVE-2022-3437.html https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html http://www.openwall.com/lists/oss-security/2023/02/08/1 Common Vulnerability Exposure (CVE) ID: CVE-2022-3592 https://access.redhat.com/security/cve/CVE-2022-3592 https://bugzilla.redhat.com/show_bug.cgi?id=2137776 https://www.samba.org/samba/security/CVE-2022-3592.html
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.