CVE-2022-4981: DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4981?
CVE-2022-4981 is classified as a vulnerability that can lead to null pointer dereference, potentially impacting application stability.
How do I fix CVE-2022-4981?
To fix CVE-2022-4981, upgrade to a version of DCMTK later than 3.6.7 where the vulnerability has been addressed.
Who is affected by CVE-2022-4981?
CVE-2022-4981 affects users of DCMTK versions up to and including 3.6.7.
What type of vulnerability is CVE-2022-4981?
CVE-2022-4981 is a local vulnerability that results in a null pointer dereference during operation.
Can CVE-2022-4981 be exploited remotely?
No, CVE-2022-4981 requires local access to exploit the null pointer dereference.