Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : DCMTK vulnerabilities (USN-5882-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5882-1 advisory. Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or an automated system were tricked into...

SUSE CVE-2021-41688

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack...

Denial Of Service (DoS)

dcmtk is vulnerable to Denial of Service DoS. The vulnerability exists due to a memory leak in the memory deplete unit because all memory resources run out leading to the system to crash...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

Memory corruption

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

UBUNTU-CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272: Missing Release of Memory after Effective Lifetime

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

CVE-2022-43272

CVE-2022-43272 affects DCMTK v3.6.7, with a memory leak in the single-process path related to T_ASC_Association (notably in ASC_receiveAssociation and parseUserInfo flows). The issue is a memory leak rather than an explicit remote code execution or crash in the presented docs, and exploitation de...

Missing Release of Memory after Effective Lifetime

DCMTK v3.6.7 was discovered to contain a memory leak via the TASCAssociation object...

Path Traversal

dcmtk is vulnerable to path traversal, A remote attacker is able to write DICOM files into arbitrary directories under controlled names...

Remote Code Execution

dcmtk is vulnerable to remote code execution. Service class users are vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names resulting in remote code execution...

Denial Of Service (DoS)

OFFIS DCMTK's All versions prior to 3.6.7 has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition...

Fedora: Security Advisory for dcmtk (FEDORA-2022-eaeeb0ca2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for dcmtk (FEDORA-2022-d9f1bb102d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: dcmtk-3.6.7-1.fc36

DCMTK is a collection of libraries and applications implementing large parts the DICOM standard. It includes software for examining, constructing and converting DICOM image files, handling offline media, sending and receiving images over a network connection, as well as demonstrative image storag...