Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-41689HistoryJun 28, 2022 - 1:15 p.m.
CVE-2021-41689
2022-06-2813:15:00
Debian Security Bug Tracker
security-tracker.debian.org
12
0.001 Low
EPSS
Percentile
38.8%
DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | dcmtk | < 3.6.7-1 | dcmtk_3.6.7-1_all.deb |
| Debian | 11 | all | dcmtk | <= 3.6.5-1 | dcmtk_3.6.5-1_all.deb |
| Debian | 10 | all | dcmtk | <= 3.6.4-2.1 | dcmtk_3.6.4-2.1_all.deb |
| Debian | 999 | all | dcmtk | < 3.6.7-1 | dcmtk_3.6.7-1_all.deb |
| Debian | 13 | all | dcmtk | < 3.6.7-1 | dcmtk_3.6.7-1_all.deb |
Related
cve
cve
CVE-2021-41689
2022-06-28 13:15:00
veracode
veracode
Denial Of Service (DoS)
2022-06-29 06:50:32
gitlab
gitlab
NULL Pointer Dereference
2022-06-28 00:00:00
cnvd
cnvd
DCMTK Heap Buffer Overflow Vulnerability (CNVD-2022-60669)
2022-06-30 00:00:00
osv
osv
CVE-2021-41689
2022-06-28 13:15:10
dcmtk vulnerabilities
2023-02-22 18:23:35
ubuntucve
ubuntucve
CVE-2021-41689
2022-06-28 00:00:00
prion
prion
Design/Logic Flaw
2022-06-28 13:15:00
cvelist
cvelist
CVE-2021-41689
2022-06-28 09:38:17
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0083)
2023-03-28 00:00:00
Ubuntu: Security Advisory (USN-5882-1)
2023-02-23 00:00:00
ubuntu
ubuntu
DCMTK vulnerabilities
2023-02-22 00:00:00
mageia
mageia
Updated dcmtk packages fix security vulnerability
2023-03-11 22:00:39