Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2021-41690
HistoryJun 28, 2022 - 9:41 a.m.

CVE-2021-41690

2022-06-2809:41:00
mitre
github.com
5
dcmtk
memory handling
vulnerability
dos

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST and are not freed properly. Sending specific requests to the dcmqrdb program can incur a memory leak. An attacker can use it to launch a DoS attack.

AI Score

6.5

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial