Linux Distros Unpatched Vulnerability : CVE-2024-22373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially...

openSUSE Security Advisory (openSUSE-SU-2024:0168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : gdcm (2024-c5909efa5c)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-c5909efa5c advisory. Automatic update for gdcm-3.0.23-5.fc41. Changelog Fri Apr 26 2024 Sandro - 3.0.23-5 - Apply security patches - Fix TALOS-2024-1924, CVE-2024-22391...

Security update for gdcm (important)

openSUSE Security Update: Security update for gdcm Announcement ID: openSUSE-SU-2024:0168-1 Rating: important References: 1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP6 An...

openSUSE Security Advisory (openSUSE-SU-2024:0167-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for gdcm (important)

openSUSE Security Update: Security update for gdcm Announcement ID: openSUSE-SU-2024:0167-1 Rating: important References: 1223398 Cross-References: CVE-2024-22373 CVSS scores: CVE-2024-22373 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP5 An...

Fedora 39 : gdcm (2024-11821b16ac)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-11821b16ac advisory. Security fixes - TALOS-2024-1924, CVE-2024-22391: heap overflow - TALOS-2024-1935, CVE-2024-22373: out-of-bounds write - TALOS-2024-1944,...

CVE-2024-22373

The CVE-2024-22373 vulnerability affects Grassroot DICOM 3.0.23 (Mathieu Malaterre) and is caused by an out-of-bounds write in JPEG2000Codec::DecodeByStreamsCommon, leading to a heap buffer overflow when processing a crafted DICOM file. Exploitation would be via a malicious file and could impact ...

CVE-2024-22373

An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...