CVE-2024-34508: Null Pointer Dereference
Published May 5, 2024
·Updated
dcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.
Affected Software
3 affected componentsFixes available
debian/dcmtk<=3.6.5-1, <=3.6.7-9~deb12u1
3.6.8-6
OFFIS DCMTK<3.6.9
Debian Debian Linux=10.0
Remediation
Event History
May 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
Description
Data Sourced
via NVD·08:15 PM
RemedySeverityWeaknessAffected Software
Sep 21, 2024
Data Sourced
via Ubuntu·10:10 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·10:11 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-34508?
CVE-2024-34508 has been categorized as having a high severity due to its potential for causing application crashes.
2
How do I fix CVE-2024-34508?
To fix CVE-2024-34508, you should upgrade to DCMTK version 3.6.9 or later.
3
Which versions of DCMTK are affected by CVE-2024-34508?
DCMTK versions from 3.6.5-1 up to and including 3.6.8-6 are affected by CVE-2024-34508.
4
What type of vulnerability is CVE-2024-34508?
CVE-2024-34508 is a segmentation fault vulnerability triggered by an invalid DIMSE message.
5
What software is impacted by CVE-2024-34508?
The software impacted by CVE-2024-34508 is the dcmnet component in DCMTK prior to version 3.6.9.