PT-2024-25941 · Dcmtk+5 · Dcmtk+5

Nils Bars · Published 2024-03-13 · Updated 2025-09-10 · CVE-2024-34508

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.6.9

Description The issue is related to a segmentation fault in dcmnet, a component of DCMTK, which occurs when an invalid DIMSE message is received.

Recommendations For versions prior to 3.6.9, update to version 3.6.9 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Buffer Overflow

Weakness Enumeration

CWE-476

CWE-119

Related Identifiers

BDU:2025-03917

CVE-2024-34508

DLA-3847-1

DLA-4038-1

DLA-4038-2

MGASA-2024-0251

OPENSUSE-SU-2025:0053-1

USN-7010-1

Affected Products

Astra Linux

Dcmtk

Debian

Linuxmint

Red Os

Ubuntu

References · 50

• 🔥 https://support.dcmtk.org/redmine/issues/1114 · Exploit
• https://github.com/DCMTK/dcmtk/commit/c78e434c0c5f9d932874f0b17a8b4ce305ca01f5 · Patch
• https://osv.dev/vulnerability/DLA-4038-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-43272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34508 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34508 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-2121 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7010-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:0053-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-34509 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-34508 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-34508 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7010-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0251.html · Security Note
• https://ubuntu.com/security/CVE-2021-41689 · Vendor Advisory