Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-14841

Опубликовано: 18 дек. 2025
Источник: nvd
CVSS3: 3.3
CVSS2: 1.7
EPSS Низкий

Описание

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve this issue. Patch name: ffb1a4a37d2c876e3feeb31df4930f2aed7fa030. You should upgrade the affected component.

EPSS

Процентиль: 2%
0.00117
Низкий

3.3 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-404

Связанные уязвимости

CVSS3: 3.3
ubuntu
8 месяцев назад

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve this issue. Patch name: ffb1a4a37d2c876e3feeb31df4930f2aed7fa030. You should upgrade the affected component.

CVSS3: 3.3
debian
8 месяцев назад

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element ...

CVSS3: 3.3
github
8 месяцев назад

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve this issue. Patch name: ffb1a4a37d2c876e3feeb31df4930f2aed7fa030. You should upgrade the affected component.

CVSS3: 3.3
fstec
8 месяцев назад

Уязвимость компонента dcmqrdb/libsrc/dcmqrdbi.cc библиотеки для работы с форматом DICOM DCMTK, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 2%
0.00117
Низкий

3.3 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-404