dcmtk - security update

Fixed packages 1

Vulnerabilities 9

• High 7.5
  CVE-2021-41689

  DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would qu…

  dcmtk dcmtk Debian Ubuntu
  Jun 28, 2022
• High 7.5
  CVE-2022-2121

  OFFIS DCMTK NULL Pointer Dereference

  OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

  OFFIS DCMTK dcmtk dcmtk Debian Ubuntu
  Jun 24, 2022
• High 7.5
  CVE-2022-43272

  DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.

  dcmtk dcmtk Debian Ubuntu
  Dec 2, 2022
• High 7.5
  CVE-2024-28130

  An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS …

  OFFIS DCMTK dcmtk dcmtk Debian Ubuntu
  Apr 23, 2024
• Medium 5.3
  CVE-2024-34509

  dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

  dcmtk dcmtk Debian Ubuntu
  May 5, 2024
• Medium 4.3
  CVE-2024-34508

  dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.

  dcmtk dcmtk Debian Ubuntu
  May 5, 2024
• Unscored —
  CVE-2021-41687

  DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does n…

  dcmtk dcmtk Debian Ubuntu
  Jun 28, 2022
• Unscored —
  CVE-2021-41688

  DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still us…

  dcmtk dcmtk Debian Ubuntu
  Jun 28, 2022
• Unscored —
  CVE-2021-41690

  DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are reco…

  dcmtk dcmtk Debian Ubuntu
  Jun 28, 2022