CVE-2015-8979 Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long s...
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dcmtk(Debian:12) | < 3.6.1~20160216-2 | 3.6.1~20160216-2 |
| debian/dcmtk(Debian:13) | < 3.6.1~20160216-2 | 3.6.1~20160216-2 |
| debian/dcmtk(Debian:14) | < 3.6.1~20160216-2 | 3.6.1~20160216-2 |
| debian linux | = 8.0 | No fix listed |
| dicom dcmtk | <= 3.6.0 | No fix listed |
References
- Debian Security Tracker CVE-2015-8979 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- DSA-3749 third-party-advisory vendor-advisory
- [oss-security] 20161217 Re: CVE request - DCMTK remote stack buffer overflow mailing-list patch third-party-advisory
- 94951 third-party-advisory vdb-entry
- www.zeroscience.mk exploit technical-description third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry
- bugs.debian.org issue-tracking