Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5882-1 advisory.

    Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or an automated system were     tricked into opening a certain specially crafted

    input file, a remote attacker could possibly use this issue to cause a

    denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)

    Omar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or an automated system were     tricked into opening a certain specially crafted

    input file, a remote attacker could possibly use this issue to cause a

    denial of service. This issue only affected Ubuntu 16.04 LTS and

    Ubuntu 18.04 LTS. (CVE-2019-1010228)

    Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system     were tricked into opening a certain specially crafted input file, a remote attacker could possibly use     this issue to

    cause a denial of service. This issue only affected Ubuntu 16.04 LTS,

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687, CVE-2021-41688, CVE-2021-41689,     and CVE-2021-41690)

    Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled certain inputs. If a user or an     automated system were tricked into opening a certain specially crafted input file, a remote attacker could     possibly use this issue to execute arbitrary code. This issue only affected

    Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-2119 and     CVE-2022-2120)

    Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled pointers. If a user or an     automated system were tricked into opening a certain specially crafted input file, a remote attacker could     possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu     18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-2121)

    It was discovered that DCMTK incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a certain specially crafted input file, a remote attacker could possibly use this     issue to

    cause a denial of service. This issue affected Ubuntu 16.04 LTS,

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-43272)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Gjoko Krstic of Zero Science Labs discovered that dcmtk, a collection of libraries implementing the DICOM standard, did not properly handle the size of data received from the network. This could lead to denial-of-service (via application crash) or arbitrary code execution.

At several places in the code a wrong length of ACSE data structures received over the network can cause overflows or underflows when processing those data structures. Related checks have been added at various places in order to prevent such (possible) attacks. Thanks to Kevin Basista for the report.

The bug will indeed affect all DCMTK-based server applications that accept incoming DICOM network connections that are using the dcmtk-3.6.0 and earlier versions.

(From: http://zeroscience.mk/en/vulnerabilities/ZSL-2016-5384.php)

For Debian 7 'Wheezy', these problems have been fixed in version 3.6.0-12+deb7u1.

We recommend that you upgrade your dcmtk packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
171810	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : DCMTK vulnerabilities (USN-5882-1)	Nessus	Ubuntu Local Security Checks	critical
96193	Debian DSA-3749-1 : dcmtk - security update	Nessus	Debian Local Security Checks	high
95955	Debian DLA-755-1 : dcmtk security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2015-8979

high

Tenable Plugins

critical

high

high