Synology DiskStation Manager and Unified Controller Out-of-Bounds Write Vulnerability Leading to Denial-of-Service

An out-of-bounds write vulnerability has been identified in the CGI components of Synology DiskStation Manager (DSM) versions prior to 7.2.1-69057-2 and 7.2.2-72806, as well as in Synology Unified Controller (DSMUC) versions prior to 3.1.4-23079. This vulnerability allows remote attackers to conduct denial-of-service attacks via unspecified vectors.

Impact

Exploitation of this vulnerability can lead to denial-of-service conditions, causing the system to become unresponsive or unavailable.

Remediation

Users can upgrade to Synology DiskStation Manager (DSM) 7.2.2-72806 or above, or DSM 7.2.1-69057-2 or above. For Synology Unified Controller (DSMUC), users should upgrade to version 3.1.4-23079 or above.