Lucene search
+L

405 matches found

Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.7 views

PT-2025-2776

Name of the Vulnerable Software and Affected Versions: OFFIS DCMTK version 3.6.8 Description: An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a maliciou...

9.8CVSS7AI score0.02913EPSS
SaveExploits8References84
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.9 views

PT-2025-2931

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK version 3.6.8 Description An improper array index validation issue exists in the determineMinMax functionality. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger...

8.4CVSS7.1AI score0.01728EPSS
SaveExploits8References77
OpenVAS
OpenVAS
added 2024/11/28 12:0 a.m.14 views

Mageia: Security Advisory (MGASA-2024-0380)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.00729EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/27 7:59 p.m.14 views

MGASA-2024-0380 Updated dcmtk packages fix security vulnerability

A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. CVE-2024-27628...

8.1CVSS8.3AI score0.00729EPSS
SaveExploits1References3
Mageia
Mageia
added 2024/11/27 7:59 p.m.27 views

Updated dcmtk packages fix security vulnerability

A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component. CVE-2024-27628...

8.1CVSS8.5AI score0.00729EPSS
SaveExploits1References2
OPENSUSE Linux
OPENSUSE Linux
added 2024/11/22 12:0 a.m.5 views

dcmtk-3.6.8-5.1 on GA media (moderate)

dcmtk-3.6.8-5.1 on GA media Announcement ID: openSUSE-SU-2024:14514-1 Rating: moderate Cross-References: CVE-2024-27628 CVE-2024-34509 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...

8.1CVSS7.1AI score0.00748EPSS
SaveExploits2
OSV
OSV
added 2024/11/21 12:0 a.m.12 views

OPENSUSE-SU-2024:14514-1 dcmtk-3.6.8-5.1 on GA media

These are all security issues fixed in the dcmtk-3.6.8-5.1 package on the GA media of openSUSE Tumbleweed...

8.1CVSS6.4AI score0.00748EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2024/11/14 12:0 a.m.12 views

Fedora 37 : OpenImageIO / ctk / dcmtk (2022-73bf8ee661)

The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-73bf8ee661 advisory. Security fix for CVE-2021-41688, CVE-2021-41690, CVE-2021-41687, CVE-2021-41689 Tenable has extracted the preceding description block directly from...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2024/09/18 12:0 a.m.38 views

Ubuntu: Security Advisory (USN-7010-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.01728EPSS
SaveExploits5References2
Ubuntu
Ubuntu
added 2024/09/17 5:18 a.m.19 views

USN-7010-1: DCMTK vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

7.5CVSS6.8AI score0.01728EPSS
SaveExploits5
OSV
OSV
added 2024/09/17 5:18 a.m.2 views

USN-7010-1 dcmtk vulnerabilities

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS...

7.5CVSS7.1AI score0.01728EPSS
SaveExploits5References10
Tenable Nessus
Tenable Nessus
added 2024/09/17 12:0 a.m.30 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : DCMTK vulnerabilities (USN-7010-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7010-1 advisory. Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits5References10
OpenVAS
OpenVAS
added 2024/09/10 12:0 a.m.11 views

Fedora: Security Advisory (FEDORA-2023-29c8c2d740)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01568EPSS
SaveExploits2References3
Redos
Redos
added 2024/07/16 12:0 a.m.21 views

ROS-20210716-02

A vulnerability in the DICOM DCMTK library is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service Vulnerability of the library for working with DICOM DCMTK format is related to allocation of heap memory for parsing the data, b...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2024/07/04 12:0 a.m.20 views

Mageia: Security Advisory (MGASA-2024-0251)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01692EPSS
SaveExploits3References4
Mageia
Mageia
added 2024/07/03 4:36 p.m.63 views

Updated dcmtk packages fix security vulnerabilities

Multiple vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. CVE-2024-28130 Segmentation faults due to incorrect typecast CVE-2024-34508 Segmentation fault via invalid DIMSE message CVE-2024-34509...

7.5CVSS6.7AI score0.01692EPSS
SaveExploits3References2
OSV
OSV
added 2024/07/03 4:36 p.m.16 views

MGASA-2024-0251 Updated dcmtk packages fix security vulnerabilities

Multiple vulnerabilities have been fixed in DCMTK, a collection of libraries and applications implementing large parts the DICOM standard for medical images. CVE-2024-28130 Segmentation faults due to incorrect typecast CVE-2024-34508 Segmentation fault via invalid DIMSE message CVE-2024-34509...

7.5CVSS6.7AI score0.01692EPSS
SaveExploits3References3
OpenVAS
OpenVAS
added 2024/07/01 12:0 a.m.20 views

Debian: Security Advisory (DLA-3847-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.01728EPSS
SaveExploits5References2
NVD
NVD
added 2024/06/28 7:15 p.m.21 views

CVE-2024-27628

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component...

8.1CVSS0.00729EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2024/06/28 7:15 p.m.19 views

CVE-2024-27628

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component...

8.1CVSS6.9AI score0.00729EPSS
SaveExploits1References3
Rows per page
Query Builder