CVE-2023-32975
QTS, QuTS hero
Reported by qnap · Published December 8, 2023
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.2.2534 build 20230927 and later
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| QuTS hero | QNAP Systems Inc. | h5.1.2.2534 build 20230927, h5.0.1.2515 build 20230907 |
| QTS | QNAP Systems Inc. | 5.1.2.2533 build 20230926, 5.0.1.2514 build 20230906 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| QNAP Systems Inc. | QTS | 5.0.x, 5.1.x |
| QNAP Systems Inc. | QuTS hero | h5.0.x, h5.1.x |
| QNAP Systems Inc. | QuTS hero | 5.0.x, 5.1.x |
| QNAP Systems Inc. | QTS | 5.1.x, 5.0.x |
Timeline
- Jun 9, 2023 PoC Published (43 in total, the first dated here)
- Dec 8, 2023 CVE Published
- Dec 9, 2023 EPSS Score (30 in total, the first dated here)
- May 27, 2025 CVE Updated
- Apr 23, 2026 Distribution Patch (6 in total, the first dated here)
- Apr 23, 2026 Security Advisory (7 in total, the first dated here)
- Aug 9, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-32975
vulnetix vdb fixes CVE-2023-32975Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-32975/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart