Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Synology Drive Client — Synology-SA-24:10 Synology Drive Client Clear all filters
TI-2022-24559 CVE-2022-49041 · GHSA-hjw4-82rg-j8mh

Buffer overflow in Synology Drive Client

Priority LOW 20

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00173 Published 2024-09-26 Fixed in 3.5.0-16084 CWE-120
TI-2022-24558 CVE-2022-49040 · GHSA-8w37-7r3v-2w47

Buffer overflow in Synology Drive Client

Priority LOW 20

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00173 Published 2024-09-26 Fixed in 3.5.0-16084 CWE-120
TI-2022-24557 CVE-2022-49039 · GHSA-9rj8-jgp6-97cj

Out-of-bounds write in Synology Drive Client

Priority LOW 31

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00207 Published 2024-09-26 Fixed in 3.5.0-16084 CWE-787
TI-2022-24555 CVE-2022-49037 · GHSA-m9fj-gpr4-vjqm

Sensitive information in log files in Synology Drive Client

Priority LOW 30

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vec…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00547 Published 2024-09-26 Fixed in 3.5.0-16084 CWE-532
TI-2023-29266 CVE-2023-52946 · GHSA-pfx6-gm2c-cw74

Buffer overflow in Synology Drive Client

Priority MEDIUM 42

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00537 Published 2024-09-26 Fixed in 3.5.0-16084 CWE-120