Astra Linux – vulnerability in dcmtk

A flaw has been identified in OFFIS DCMTK up to version 3.7.0. The affected component is the XMLNode::parseFile function within the ofxml.cc library located at std/libsrc/. Executing any manipulation on this function may result in a heap-based buffer overflow. The attack can be carried out...