Synology Drive Client Exploited by Classic Buffer Overflow

CVE-2022-49040

Summary

A buffer overflow issue exists in the connection management functionality of Synology Drive Client, specifically affecting versions prior to 3.4.0-15721. This vulnerability enables local users with administrative rights to exploit the flaw, resulting in a crash of the client application. The attack can be executed through unspecified vectors, potentially leading to disruptions in service and overall system stability.

References