Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2021-41688
HistoryJun 28, 2022 - 9:44 a.m.

CVE-2021-41688

2022-06-2809:44:06
mitre
github.com
6
dcmtk
vulnerability
memory handling
dos attack

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific requests to the dcmqrdb program will incur a double free. An attacker can use it to launch a DoS attack.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial