Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dcmtk | Dec 30, 2016 | Dec 29, 2016 |
| Ubuntu | — | Upgrade libdcmtk5 (Ubuntu Pro)Upgrade dcmtk (Ubuntu Pro)Upgrade libdcmtk14 (Ubuntu Pro)Upgrade libdcmtk17Upgrade libdcmtk12 (Ubuntu Pro)Upgrade dcmtkUpgrade libdcmtk16 (Ubuntu Pro) | Mar 22, 2023 | Feb 15, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub