Описание
A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasing it.
A flaw was found in the Grassroots DICOM library (GDCM). This memory leak vulnerability occurs when the library processes maliciously crafted DICOM files containing non-standard value representation (VR) types in their file meta-information. A remote attacker can exploit this by providing such a file, leading to vast memory allocations and resource depletion. This can trigger a denial-of-service condition, making the affected system unavailable.
Отчет
A memory leak flaw in the Grassroots DICOM library (GDCM) can lead to a denial-of-service condition. This MODERATE vulnerability occurs when the library processes maliciously crafted DICOM files containing non-standard value representation types in their file meta-information. Red Hat products that utilize GDCM and process untrusted DICOM files are affected.
Ссылки на источники
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasing it.
A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasing it.
A memory leak exists in the Grassroots DICOM library (GDCM). The bug o ...
A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource depletion, triggering a denial-of-service condition. A maliciously crafted file can fill the heap in a single read operation without properly releasing it.
6.5 Medium
CVSS3