CVE-2024-27628: Buffer Overflow
Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dcmtkto a version that resolves this vulnerability.Fixed in 3.6.7-9~deb12u2 - Upgrade
Upgrade
debian/dcmtkto a version that resolves this vulnerability.Fixed in 3.6.8-6 - Upgrade
Upgrade
debian/dcmtkto a version that resolves this vulnerability.Fixed in 3.6.7-9~deb12u4Fixed in 3.6.9-5+deb13u3Fixed in 3.7.0+really3.7.0-7
Event History
Frequently Asked Questions
What is the vulnerability identified by CVE-2024-27628?
CVE-2024-27628 is a Buffer Overflow vulnerability in DCMTK v.3.6.8 that allows an attacker to execute arbitrary code.
What is the severity of CVE-2024-27628?
The severity of CVE-2024-27628 is considered high due to the potential for executing arbitrary code.
How do I fix CVE-2024-27628?
To fix CVE-2024-27628, upgrade to the latest version of DCMTK that addresses this buffer overflow vulnerability.
Which version of DCMTK is affected by CVE-2024-27628?
DCMTK versions prior to the patched release following the discovery of CVE-2024-27628 are affected.
What impact does CVE-2024-27628 have on application security?
CVE-2024-27628 can compromise application security by allowing attackers to execute malicious code on vulnerable systems.