CVE-2022-4981 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the com…
Medium CVSS: 4.8

CVE-2022-4981

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised.
Vendor
Offis
Product
Dcmtk
CWE
CWE-404
Yayın Tarihi
2025-10-21 15:15:37
Güncelleme
2025-10-31 14:55:59
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 Dcmtk MEDIUM Offis 2025

Referanslar

https://shimo.im/docs/e1Azd4dDQXUgOGqW/ https://support.dcmtk.org/redmine/issues/1026 https://vuldb.com/?ctiid.329029 https://vuldb.com/?id.329029 https://vuldb.com/?submit.673134 https://shimo.im/docs/e1Azd4dDQXUgOGqW/read