PT-2022-6749 · Dcmtk+3 · Dcmtk+3
Published
2022-06-09
·
Updated
2025-02-12
·
CVE-2022-43272
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
DCMTK version 3.6.7
Description
The issue is related to a memory leak in the DCMTK library, which is used for working with the DICOM format. This memory leak occurs via the T ASC Association object and is caused by incorrect memory release before deleting the last reference. Exploitation of this issue can allow a remote attacker to cause a denial of service.
Recommendations
For DCMTK version 3.6.7, consider applying a patch or update to fix the memory leak issue, as this version is affected by the memory leak via the T ASC Association object. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Dcmtk
Linuxmint
Ubuntu