CVE-2026-5663
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
Résumé
OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The patch is named edbb085e45788dccaf0e64d71534cfca925784b8. Applying a patch is the recommended action to fix this issue.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-5663 dcmtk
- Ubuntu UBUNTU-CVE-2026-5663 dcmtk
Références
- advisory github.com
- advisory machinespirits.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- patch github.com
- report support.dcmtk.org
- report vuldb.com