Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-35505 →

DEBIAN-CVE-2026-35505

An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows unti...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops responding until restart.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.9-5+deb13u3"}]}]

Debian:14 dcmtk

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0+really3.7.0-7"}]}]

Références

advisory security-tracker.debian.org