Published: 15/02/2017 Updated: 23/02/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and previous versions allows remote malicious users to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 8.0
dicom dcmtk

Debian Bug report logs - #848830 dcmtk: remote stack buffer overflow CVE-2015-8979 Package: dcmtk; Maintainer for dcmtk is Debian Med Packaging Team <debian-med-packaging@listsaliothdebianorg>; Source for dcmtk is src:dcmtk (PTS, buildd, popcon) Reported by: Balint Reczey <balint@balintreczeyhu> Date: Tue, 20 Dec ...

Gjoko Krstic of Zero Science Labs discovered that dcmtk, a collection of libraries implementing the DICOM standard, did not properly handle the size of data received from the network This could lead to denial-of-service (via application crash) or arbitrary code execution For the stable distribution (jessie), this problem has been fixed in version ...

CWE-119 https://bugzilla.redhat.com/show_bug.cgi?id=1405919 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5384.php http://www.securityfocus.com/bid/94951 http://www.openwall.com/lists/oss-security/2016/12/18/2 http://www.debian.org/security/2016/dsa-3749 http://packetstormsecurity.com/files/140191/DCMTK-storescp-DICOM-storage-C-STORE-SCP-Remote-Stack-Buffer-Overflow.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848830 https://nvd.nist.gov https://www.debian.org/security/./dsa-3749

CVE-2015-8979

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect