Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a d...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20160216-2"}]}]

Debian:13 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20160216-2"}]}]

Debian:14 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20160216-2"}]}]

参照URL

advisory security-tracker.debian.org