[SECURITY] [DLA 4363-1] dcmtk security update

Debian LTS Advisory DLA-4363-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 03, 2025 https://wiki.debian.org/LTS Package : dcmtk Version : 3.6.5-1+deb11u5 CVE ID : CVE-2020-36855 CVE-2022-4981 CVE-2025-9732 Debian Bug : 1113993 Several vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2020-36855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of...

CVE-2020-36855

creationtimestamp| type| source ---|---|--- 2025-10-21 17:17:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ptjs2tku2m...

CVE-2025-36855

creationtimestamp| type| source ---|---|--- 2025-09-08 15:11:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydigyqxqj2d 2025-09-08 15:15:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydiood4vf2l 2025-09-08 15:53:15+00:00| seen| https://t.me/canyoupwnme/6959...

CVE-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability

...

CVE-2022-36855

A use after free vulnerability in ivactl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2021-36855

creationtimestamp| type| source ---|---|--- 2022-09-30 20:36:28+00:00| seen| https://t.me/cibsecurity/50789...

CVE-2021-36855

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2021-36855

CVE-2021-36855 affects the WordPress Booking Ultra Pro plugin versions 1.1.4 where available; Patchstack notes that no patched version may exist, while PT Security recommends updating or restricting access. Several feeds corroborate the vulnerability, but explicit exploit details are not provide...

CVE-2021-36855 WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Scripting XSS via Cross-Site Request Forgery CSRF vulnerability in Booking Ultra Pro plugin = 1.1.4 at WordPress...

CVE-2022-36855

creationtimestamp| type| source ---|---|--- 2022-09-09 18:29:26+00:00| seen| https://t.me/cibsecurity/49507...

CVE-2022-36855

CVE-2022-36855 is a use-after-free vulnerability in the iva_ctl driver, present in versions prior to Samsung SMR Sep-2022 Release 1. The issue allows a local attacker with low privileges and no user interaction to trigger memory access faults (per CVSS, high impact on confidentiality, integrity, ...

Unspecified vulnerability in mktexlsr

mktexlsr is a library for generating catalogs. A security vulnerability exists in mktexlsr revision 36855 and versions prior to revision 36626. A local attacker can exploit this vulnerability to overwrite arbitrary files via a symbolic link attack...

Unspecified vulnerability in mktexlsr (CNVD-2017-30561)

mktexlsr is a library for generating catalogs. A security vulnerability exists in mktexlsr revision 36855 and versions prior to revision 36626. A local attacker can overwrite arbitrary files with the help of symbolic links...