CVE-2022-2120

🗓️ 24 Jun 2022 15:00:18Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 89 Views

OFFIS DCMTK's service class user (SCU) is vulnerable to relative path traversal, allowing remote code execution

Reporter	Title	Published	Views	Family All 54
AstraLinux	Astra Linux - уязвимость в dcmtk	3 May 202623:59	–	astralinux
CNNVD	OFFIS DCMTK 路径遍历漏洞	23 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-2120 OFFIS DCMTK Path Traversal	24 Jun 202215:00	–	cvelist
Debian	[SECURITY] [DLA 4227-1] dcmtk security update	24 Jun 202514:11	–	debian
Debian CVE	CVE-2022-2120	24 Jun 202215:00	–	debiancve
Tenable Nessus	Debian dla-4227 : dcmtk - security update	25 Jun 202500:00	–	nessus
Tenable Nessus	OFFIS DCMTK DICOM Toolkit < 3.6.7 Multiple Vulnerabilities	29 Jun 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (openSUSE-SU-2022:10144-1)	14 Oct 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (openSUSE-SU-2022:10145-1)	13 Oct 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : dcmtk (openSUSE-SU-2023:0108-1)	16 May 202300:00	–	nessus

NVD

Vulners

Node

offis dcmtkRange<3.6.7

[
  {
    "product": "DCMTK",
    "vendor": "OFFIS",
    "versions": [
      {
        "lessThan": "3.6.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]