CVE-2024-34509: Undefined Security Weakness

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

CVE-2024-34508: NULL Pointer Dereference

dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

CVE-2024-34509

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

CVE-2024-34508

dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

CVE-2024-34509

The dcmdata component in DCMTK before version 3.6.9 is vulnerable to a segmentation fault triggered by an invalid DIMSE message . Technical analysis indicates that the root cause involves operations exceeding buffer boundaries in memory, which can lead to a denial of service (DoS). Exploitation d...

CVE-2024-34509

dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message...

openSUSE Security Advisory (openSUSE-SU-2024:0113-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : dcmtk (openSUSE-SU-2024:0113-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0113-1 advisory. - An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted...

OPENSUSE-SU-2024:0113-1 Security update for dcmtk

This update for dcmtk fixes the following issues: Fixed incorrect type conversion in the DVPSSoftcopyVOIPList:createFromImage functionality of OFFIS DCMTK boo1223324, CVE-2024-28130 - Add missing requirements for dcmtk-devel boo1220809 - Update to 3.6.8 See DOCS/CHANGES.368 for the full list of...

Security update for dcmtk (important)

openSUSE Security Update: Security update for dcmtk Announcement ID: openSUSE-SU-2024:0113-1 Rating: important References: 1220809 1223324 Cross-References: CVE-2024-28130 CVSS scores: CVE-2024-28130 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-28130

CVE-2024-28130 affects OFFIS DCMTK 3.6.8 (DVPSSoftcopyVOI_PList::createFromImage) with a malformed file enabling arbitrary code execution. Public references in Debian (DCMTK 3.6.5-1+deb11u1 fix), Ubuntu security advisory USN-7010-1, and Fedora dcmtk 3.6.9-2.fc42 indicate multiple distributions ha...

OFFIS DCMTK 代码问题漏洞

OFFIS DCMTK is a collection of libraries and applications that implement most of the DICOM standards from OFFIS Germany. Software for inspecting, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, as well as a demo image...

CVE-2024-28130: Incorrect Type Conversion or Cast

An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

OFFIS DCMTK DVPSSoftcopyVOI_PList::createFromImage incorrect type conversion vulnerability

Talos Vulnerability Report TALOS-2024-1957 OFFIS DCMTK DVPSSoftcopyVOIPList::createFromImage incorrect type conversion vulnerability April 23, 2024 CVE Number CVE-2024-28130 SUMMARY An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOIPList::createFromImage functionality of OFF...

PT-2024-22280

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK version 3.6.8 Description An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI PList::createFromImage functionality. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provi...

PT-2024-25941

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.6.9 Description The issue is related to a segmentation fault in dcmnet, a component of DCMTK, which occurs when an invalid DIMSE message is received. Recommendations For versions prior to 3.6.9, update to version 3.6....