安全ID : NAS-201901-22

Security Advisory for Vulnerabilities in QTS


  • 发布日期 : January 22, 2019

  • 通用漏洞披露 : Apache HTTP Server vulnerabilities: CVE-2018-11763 | CVE-2018-8011 | CVE-2018-1333 | CVE-2017-15710 | CVE-2018-1283 | CVE-2018-1303 | CVE-2018-1301 | CVE-2017-15715 | CVE-2018-1312 | CVE-2018-1302 | CVE-2017-9798 | CVE-2017-9789 | CVE-2017-9788 | CVE-2017

  • 受影响产品: QTS 4.4.0: build 20181127 and earlier versions
    QTS 4.3.5: build 20181114 and earlier versions
    QTS 4.3.4: build 20181026 and earlier versions
    QTS 4.3.3: build 20181029 and earlier versions

严重程度

Important

状态

已解决


Summary

Multiple Apache HTTP Server, PHP, and Samba vulnerabilities have been reported; some of which affect QTS. If successfully exploited, these vulnerabilities could allow remote attackers to launch DDos attacks or access sensitive information.

We have fixed these issues in following QTS versions:

  • QTS 4.4.0: QTS 4.4.0 build 20190119 and later
  • QTS 4.3.5: QTS 4.3.6 build 20181228 and later
  • QTS 4.3.4: QTS 4.3.4 build 20190102 and later
  • QTS 4.3.3: QTS 4.3.3 build 20190102 and later

Recommendation

To resolve the issue, you must update your QTS to the latest version.

Installing the QTS Update

  1. Log on to QTS as administrator.
  2. Go to Control Panel > System > Firmware Update.
  3. Under Live Update, click Check for Update.
    QTS downloads and installs the latest available update.

 

修订历史: V1.0 (January 22, 2018) - Published

选择规格

      显示更多 隐藏更多
      open menu
      back to top