Lucene search

K
redosRedosROS-20210716-02
HistoryJul 16, 2021 - 12:00 a.m.

ROS-20210716-02

2021-07-1600:00:00
redos.red-soft.ru
5
dicom dcmtk
vulnerability
denial of service
memory release
remote attack
parsing errors

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

A vulnerability in the DICOM DCMTK library is related to pointer dereferencing errors.
Exploitation of the vulnerability allows an attacker to cause a denial of service

Vulnerability of the library for working with DICOM DCMTK format is related to allocation of heap memory for parsing the
data, but not releasing it when parsing errors occur. Exploitation of the vulnerability allows
An attacker acting remotely to cause a denial of service

A vulnerability in the DICOM DCMTK library is related to memory re-release,
to remotely cause a denial of service

Vulnerability of the library for working with DICOM DCMTK format is related to sending certain requests to the
dcmqrdb program, followed by querying its database and copying the result. Exploitation
vulnerability allows a remote attacker to cause a denial of service.

Vulnerability in the library for working with DICOM DCMTK format is related to writing all allocated memory to the global variable LST and not to the global variable LST.
global variable LST and not releasing it properly. Exploitation of the vulnerability allows
an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64dcmtk< 3.6.8-1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low