Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | dcmtk | 3.6.5-1+deb11u1 |
Vulnerabilities 11
-
High 8.4
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially…
-
High 8.4
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A sp…
-
High 7.5
DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would qu…
-
High 7.5
OFFIS DCMTK NULL Pointer Dereference
OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.
-
High 7.5
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.
-
High 7.5
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS …
-
Medium 5.3
dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
-
Medium 4.3
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
-
Unscored —
DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does n…
-
Unscored —
DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still us…
-
Unscored —
DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are reco…