OFFIS DCMTK Toolkit
Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-52868US | — | — | ||
An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or… | ||||
| CVE-2026-50254US | — | — | ||
An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly… | ||||
| CVE-2026-50003US | — | — | ||
A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths a… | ||||
| CVE-2026-35505US | — | — | ||
An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and th… | ||||
| CVE-2026-44628US | — | — | ||
An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-26-181-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-26-181-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- MitigationDCMTK
The maintainer was notified of these vulnerabilities and has provided a fix. The fix is included in the latest commits and can be obtained in the following snapshot:
- BehobenDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - BehobenDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - BehobenDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - BehobenDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest - BehobenDCMTK
https://github.com/DCMTK/dcmtk/releases/tag/latest.
https://github.com/DCMTK/dcmtk/releases/tag/latest
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan