CVE-2022-3576
published 2022-10-20CVE-2022-3576: A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.89%
54.7th percentile
A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| synology | diskstation_manager | < 7.1.1-42962-2 | 7.1.1-42962-2 |
| synology | diskstation_manager | >= unspecified < 7.1.1-42962-2 | 7.1.1-42962-2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
tiff vulnerabilities
osv·2023-11-23·CVSS 6.5
CVE-2022-40090 tiff vulnerabilities
tiff vulnerabilities
It was discovered that LibTIFF could be made to run into an infinite loop.
If a user or an automated system were tricked into opening a specially
crafted image file, an attacker could possibly use this issue to cause a
denial of service. (CVE-2022-40090)
It was discovered that LibTIFF could be made leak memory. If a user or an
automated system were tricked into opening a specially crafted image file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2023-3576)
GHSA
GHSA-gcj7-f7w5-vqx5: A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management
ghsa_unreviewed·2022-10-20
CVE-2022-3576 [HIGH] CWE-125 GHSA-gcj7-f7w5-vqx5: A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management
A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-20
Published