Synology

Drive Client

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.7

CVE-2022-49039

  • EPSS 0.02%
  • Published 26.09.2024 04:15:05
  • Last modified 08.10.2024 16:08:08

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors.

4.4

CVE-2022-49040

  • EPSS 0.03%
  • Published 26.09.2024 04:15:05
  • Last modified 08.10.2024 16:07:11

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecifi...

4.4

CVE-2022-49041

  • EPSS 0.03%
  • Published 26.09.2024 04:15:05
  • Last modified 08.10.2024 16:06:51

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecif...

8.2

CVE-2023-52946

  • EPSS 0.26%
  • Published 26.09.2024 04:15:05
  • Last modified 08.10.2024 15:55:07

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in vss service component in Synology Drive Client before 3.5.0-16084 allows remote attackers to overwrite trivial buffers and crash the client via unspecified vector...

7.8

CVE-2022-49038

  • EPSS 0.04%
  • Published 26.09.2024 04:15:04
  • Last modified 08.10.2024 16:08:35

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

6.5

CVE-2022-49037

  • EPSS 0.13%
  • Published 26.09.2024 04:15:03
  • Last modified 08.10.2024 16:08:55

Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authenticated users to obtain sensitive information via unspecified vectors.