Denial-of-Service Vulnerability in Sante PACS Server by Sante Health
CVE-2025-14501

7.5HIGH

Key Information:

Vendor

Sante

Status
Pacs Server
Vendor
CVE Published:
23 December 2025

What is CVE-2025-14501?

The Sante PACS Server is prone to a denial-of-service vulnerability that occurs due to improper handling of the HTTP Content-Length header. This flaw arises when a pointer is not adequately validated before use, allowing remote attackers to exploit the vulnerability without requiring any form of authentication. Successful exploitation leads to a denial-of-service condition, potentially disrupting the availability of the server and impacting users relying on its functionality. Organizations using Sante PACS Server should take immediate measures to safeguard their systems against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PACS Server 4.2.2

References

https://www.zerodayinitiative.com/advisories/ZDI-25-1104/
x_research-advisory

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.