Most recent entries from all

bdu:2023-03842

EUVD-2026-258043

fkie_cve-2022-2121

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

GHSA-jrq9-r9fx-4557

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

gsd-2022-2121

ICSMA-22-174-01 — OFFIS DCMTK

The affected product 's service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.CVE-2022-2119 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product 's service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.CVE-2022-2120 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.CVE-2022-2121 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

openSUSE-SU-2023:0108-1 — Security update for dcmtk

Security update for dcmtk

UBUNTU-CVE-2022-2121

Affected: Ubuntu:Pro:16.04:LTS: dcmtk, Ubuntu:Pro:18.04:LTS: dcmtk, Ubuntu:20.04:LTS: dcmtk, Ubuntu:Pro:20.04:LTS: dcmtk, Ubuntu:Pro:22.04:LTS: dcmtk, Ubuntu:Pro:24.04:LTS: dcmtk, Ubuntu:25.10: dcmtk, Ubuntu:26.04:LTS: dcmtk

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.