QNAP QTS: CVE-2023-41278: Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud

Multiple vulnerabilities have been reported to affect certain QNAP operating system versions: CVE-2023-41273: If exploited, the heap-based buffer overflow vulnerability could allow authenticated administrators to execute code via a network. CVE-2023-41274: If exploited, the NULL pointer dereference vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. CVE-2023-41275, CVE-2023-41276, CVE-2023-41277, CVE-2023-41278, CVE-2023-41279, CVE-2023-41280: If exploited, these buffer copy without checking size of input vulnerabilities could allow authenticated administrators to execute code via a network. We have already fixed the vulnerabilities in the following versions: