OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade dcmtk | Jul 3, 2024 | Jun 24, 2022 |
| Suse | — | Upgrade dcmtkUpgrade dcmtk-develUpgrade libdcmtk17 | May 16, 2023 | Jun 24, 2022 |
| Ubuntu | — | Upgrade libdcmtk14Upgrade dcmtkUpgrade libdcmtk12 (Ubuntu Pro)Upgrade libdcmtk17Upgrade libdcmtk16 (Ubuntu Pro)Upgrade libdcmtk5 (Ubuntu Pro)Upgrade libdcmtk14 (Ubuntu Pro)Upgrade dcmtk (Ubuntu Pro) | Mar 22, 2023 | Jun 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub