The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-26 advisory.

  - A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and     earlier, and 0.103.7and earlier could allow an unauthenticated, remote attacker to execute arbitrary     code. This vulnerability is due to a missing buffer size check that may result in a heap buffer overflow     write. An attacker could exploit this vulnerability by submitting a crafted HFS+ partition file to be     scanned by ClamAV on an affected device. A successful exploit could allow the attacker to execute     arbitrary code with the privileges of the ClamAV scanning process, or else crash the process, resulting     in a denial of service (DoS) condition. (CVE-2023-20032)

  - A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and     0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an     affected device. This vulnerability is due to enabling XML entity substitution that may result in XML     external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file     to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes     from any file that may be read by the ClamAV scanning process. (CVE-2023-20052)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

QNAP QTS / QuTS hero Multiple Vulnerabilities in ClamAV (QSA-23-26)

critical Nessus Plugin ID 183970

Version 1.1

Version 1.0

Version 1.1 Nov 7, 2023, 7:45 PM Plugin categorization (Remove unix agent) Plugin Feed: 202311071945
Version 1.0 Oct 27, 2023, 4:19 PM New Plugin Feed: 202310271619