CVE-2022-27600

MEDIUM Year: 2022
CVSS v3 Score
6.8
Medium
Weakness Type
CWE-400
View all →

Vulnerability Description

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

Related Vulnerabilities

CVE-2016-6172

MEDIUM
CVSS:6.8(Medium)

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR...

CWE-4002016

CVE-2018-15399

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaus...

CWE-4002018

CVE-2018-20169

MEDIUM
CVSS:6.8(Medium)

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core...

CWE-4002018

CVE-2019-1814

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device ...

CWE-4002019

CVE-2020-3132

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of ...

CWE-4002020

CVE-2020-3305

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an u...

CWE-4002020