OFFIS DCMTK NULL Pointer Dereference
CVE-2022-2121

7.5HIGH

Key Information:

Vendor

Offis

Status
Dcmtk
Vendor
CVE Published:
24 June 2022

What is CVE-2022-2121?

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

Affected Version(s)

DCMTK < 3.6.7

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01
https://lists.debian.org/debian-lts-announce/2024/06/msg0...
mailing-list

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.