ALT-PU-2025-6888

Высокий

ALT-PU-2025-6888: package dcmtk update to version 3.6.6-alt2

Источник

errata.altlinux.org

Дата публикации

27.05.2025

Дата обновления

27.05.2025

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades dcmtk to version 3.6.6-alt2.

Устраненные уязвимости2

CVE-2024-47796

Высокий 7.8

Дата публикации: 13.01.2025

CWE-119

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

CVSS 3.1

Высокий 7.8

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector: Local
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2024-47796 https://nvd.nist.gov/vuln/detail/CVE-2024-47796

Ссылки1

ALT-PU-2025-6888 https://errata.altlinux.org/ALT-PU-2025-6888

Связанные уязвимости

ROS-20250929-01

CVSS3: 8.4

redos

около 1 года назад

Множественные уязвимости dcmtk

openSUSE-SU-2025:0053-1

suse-cvrf

почти 2 года назад

Security update for dcmtk

ALT-PU-2025-8713

CVSS3: 8.4

altlinux

больше 1 года назад

ALT-PU-2025-8713: package `dcmtk` update to version 3.6.9-alt2

CVE-2024-52333

CVSS3: 7.8

ubuntu

почти 2 года назад

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

CVE-2024-52333

CVSS3: 7.8

nvd

почти 2 года назад