Debian/dcmtk: high 7.5
DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur
Action: Upgrade dcmtk to 3.6.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.7-1 | - |
Fixed versions
| 3.6.7-1 |
Sources
- osv: DEBIAN-CVE-2021-41689#Debian:14/dcmtk
- https://security-tracker.debian.org/tracker/CVE-2021-41689
published · modified · JSON