CVE-2022-2121: OFFIS DCMTK NULL Pointer Dereference
Last updated 17 September 2024
Other sources
OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dcmtkto a version that resolves this vulnerability.Fixed in 3.6.7-9~deb12u4Fixed in 3.6.9-5+deb13u3Fixed in 3.7.0+really3.7.0-7 - Upgrade
Upgrade
debian/dcmtkto a version that resolves this vulnerability.Fixed in 3.6.7-1 - Upgrade
Upgrade
OFFIS DCMTKto a version that resolves this vulnerability.Fixed in 3.6.7
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2121?
CVE-2022-2121 is classified as a denial-of-service vulnerability due to a NULL pointer dereference in OFFIS DCMTK.
How do I fix CVE-2022-2121?
To fix CVE-2022-2121, upgrade OFFIS DCMTK to version 3.6.7 or later.
Which versions of OFFIS DCMTK are affected by CVE-2022-2121?
All versions of OFFIS DCMTK prior to 3.6.7 are affected by CVE-2022-2121.
Does CVE-2022-2121 affect Debian packages?
Yes, Debian packages of dcmtk are affected if they are below version 3.6.7-9~deb12u1 or 3.6.8-6.
What could be the impact of CVE-2022-2121 on systems?
The exploit of CVE-2022-2121 may lead to a denial-of-service condition on systems processing DICOM files.