CVE-2017-17032

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
QNAP	QTS Password function	4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier

References

http://www.securitytracker.com/id/1040018Third Party Advisory, VDB Entry
https://www.qnap.com/zh-tw/security-advisory/nas-201712-15Issue Tracking, Vendor Advisory
http://www.securitytracker.com/id/1040018Third Party Advisory, VDB Entry
https://www.qnap.com/zh-tw/security-advisory/nas-201712-15Issue Tracking, Vendor Advisory

Timeline

Published: Dec 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-170339.8A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2 CVE-2017-170427.5lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attac CVE-2017-170436.1The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketp CVE-2017-170446.5An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by le CVE-2017-170458.8An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or CVE-2017-170466.5An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a r CVE-2017-170497.8TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified CVE-2017-17054.3IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not vis CVE-2017-170507.8TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified CVE-2017-170518.6An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an au CVE-2017-170527.8The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, CVE-2017-170537.0The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from