tocsin

Debian/dcmtk: critical 9.8

OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. T

Action: Upgrade dcmtk to 3.6.7-6 or later.

Affected

introducedfixedlast affected
03.6.7-6-

Fixed versions

3.6.7-6

Sources

published · modified · JSON