CVE-2024-27628

2024-06-2819:15:05

Debian Security Bug Tracker

security-tracker.debian.org

buffer overflow

dcmtk v3.6.8

ectenhancedct

arbitrary code execution

unix

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.

OSVersionArchitecturePackageVersionFilename
Debian12alldcmtk<= 3.6.7-9~deb12u1dcmtk_3.6.7-9~deb12u1_all.deb
Debian11alldcmtk< 3.6.5-1dcmtk_3.6.5-1_all.deb
Debian999alldcmtk<= 3.6.7-15dcmtk_3.6.7-15_all.deb
Debian13alldcmtk<= 3.6.7-15dcmtk_3.6.7-15_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	dcmtk	<= 3.6.7-9~deb12u1	dcmtk_3.6.7-9~deb12u1_all.deb
Debian	11	all	dcmtk	< 3.6.5-1	dcmtk_3.6.5-1_all.deb
Debian	999	all	dcmtk	<= 3.6.7-15	dcmtk_3.6.7-15_all.deb
Debian	13	all	dcmtk	<= 3.6.7-15	dcmtk_3.6.7-15_all.deb