Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5882-1
HistoryFeb 22, 2023 - 12:00 a.m.

DCMTK vulnerabilities

2023-02-2200:00:00
ubuntu.com
82
dcmtk
ubuntu
vulnerabilities
denial of service
arbitrary code
buffer
pointers
input file
esm
packages

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON

Releases

  • Ubuntu 22.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • dcmtk - OFFIS DICOM toolkit command line utilities

Details

Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)

Omar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted
input file, a remote attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 16.04 LTS and
Ubuntu 18.04 LTS. (CVE-2019-1010228)

Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a
user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to
cause a denial of service. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687,
CVE-2021-41688, CVE-2021-41689, and CVE-2021-41690)

Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled
certain inputs. If a user or an automated system were tricked into opening
a certain specially crafted input file, a remote attacker could possibly use
this issue to execute arbitrary code. This issue only affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2022-2119 and CVE-2022-2120)

Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled
pointers. If a user or an automated system were tricked into opening a
certain specially crafted input file, a remote attacker could possibly use
this issue to cause a denial of service. This issue only affected
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2022-2121)

It was discovered that DCMTK incorrectly handled certain inputs. If a
user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to
cause a denial of service. This issue affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.
(CVE-2022-43272)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.10noarchlibdcmtk17< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.10noarchdcmtk< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.10noarchdcmtk-dbgsym< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.10noarchdcmtk-doc< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.10noarchlibdcmtk-dev< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.10noarchlibdcmtk17-dbgsym< 3.6.7-6ubuntu0.1UNKNOWN
Ubuntu22.04noarchdcmtk< 3.6.6-5ubuntu0.1~esm1UNKNOWN
Ubuntu22.04noarchdcmtk< 3.6.6-5UNKNOWN
Ubuntu22.04noarchdcmtk-dbgsym< 3.6.6-5UNKNOWN
Ubuntu22.04noarchdcmtk-doc< 3.6.6-5UNKNOWN
Rows per page:
1-10 of 401

Related

mageia 1
openvas 12
osv 13
nessus 14
ics 1
ubuntucve 10
suse 2
fedora 5
cve 10
debian 3
cvelist 10
zeroscience 1
debiancve 10
prion 10
nvd 10
veracode 8
gitlab 8
cnvd 4
vulnrichment 1
mageia
mageia
Updated dcmtk packages fix security vulnerability
2023-03-11 22:00:39
openvas
openvas
Ubuntu: Security Advisory (USN-5882-1)
2023-02-23 00:00:00
Mageia: Security Advisory (MGASA-2023-0083)
2023-03-28 00:00:00
Debian: Security Advisory (DLA-3847-1)
2024-07-01 00:00:00
osv
osv
dcmtk vulnerabilities
2023-02-22 18:23:35
dcmtk - security update
2024-06-28 00:00:00
dcmtk - security update
2016-12-20 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : DCMTK vulnerabilities (USN-5882-1)
2023-02-22 00:00:00
openSUSE 15 Security Update : dcmtk (openSUSE-SU-2023:0108-1)
2023-05-16 00:00:00
Debian dla-3847 : dcmtk - security update
2024-06-28 00:00:00
ics
ics
OFFIS DCMTK
2022-06-23 12:00:00
ubuntucve
ubuntucve
CVE-2022-2119
2022-06-24 00:00:00
CVE-2022-2120
2022-06-24 00:00:00
CVE-2019-1010228
2019-07-22 00:00:00
suse
suse
Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (important)
2022-10-12 00:00:00
Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (important)
2022-10-12 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: dcmtk-3.6.2-6.fc30
2019-09-27 01:26:12
[SECURITY] Fedora 29 Update: dcmtk-3.6.2-6.fc29
2019-09-27 01:45:19
[SECURITY] Fedora 37 Update: dcmtk-3.6.7-3.fc37
2023-03-11 04:28:19
cve
cve
CVE-2021-41687
2022-06-28 13:15:10
CVE-2015-8979
2017-02-15 15:59:00
CVE-2021-41689
2022-06-28 13:15:10
debian
debian
[SECURITY] [DSA 3749-1] dcmtk security update
2016-12-29 09:57:29
[SECURITY] [DSA 3749-1] dcmtk security update
2016-12-29 09:57:29
[SECURITY] [DLA 755-1] dcmtk security update
2016-12-20 23:25:53
cvelist
cvelist
CVE-2015-8979
2017-02-15 15:00:00
CVE-2022-43272
2022-12-02 00:00:00
CVE-2021-41690
2022-06-28 09:41:00
zeroscience
zeroscience
DCMTK storescp DICOM storage (C-STORE) SCP Remote Stack Buffer Overflow
2016-12-16 00:00:00
debiancve
debiancve
CVE-2015-8979
2017-02-15 15:59:00
CVE-2019-1010228
2019-07-22 17:15:38
CVE-2021-41688
2022-06-28 13:15:10
prion
prion
Stack overflow
2017-02-15 15:59:00
Buffer overflow
2019-07-22 17:15:00
Double free
2022-06-28 13:15:00
nvd
nvd
CVE-2015-8979
2017-02-15 15:59:00
CVE-2021-41690
2022-06-28 13:15:10
CVE-2021-41688
2022-06-28 13:15:10
veracode
veracode
Denial Of Service (DoS)
2022-06-29 06:51:05
Denial Of Service (DoS)
2022-06-29 06:50:32
Denial Of Service (DoS)
2022-06-29 14:31:51
gitlab
gitlab
NULL Pointer Dereference
2022-06-28 00:00:00
Missing Release of Memory after Effective Lifetime
2022-06-28 00:00:00
Missing Release of Memory after Effective Lifetime
2022-06-28 00:00:00
cnvd
cnvd
DCMTK Heap Buffer Overflow Vulnerability (CNVD-2022-60669)
2022-06-30 00:00:00
DCMTK Denial of Service Vulnerability
2022-06-30 00:00:00
DCMTK double release vulnerability
2022-06-30 00:00:00
vulnrichment
vulnrichment
CVE-2022-43272
2022-12-02 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON
Related for USN-5882-1
mageia1openvas12osv13nessus14ics1ubuntucve10suse2fedora5cve10debian3cvelist10zeroscience1debiancve10prion10nvd10veracode8gitlab8cnvd4vulnrichment1