The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5882-1 advisory.

    Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or an automated system were     tricked into opening a certain specially crafted

    input file, a remote attacker could possibly use this issue to cause a

    denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)

    Omar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or an automated system were     tricked into opening a certain specially crafted

    input file, a remote attacker could possibly use this issue to cause a

    denial of service. This issue only affected Ubuntu 16.04 LTS and

    Ubuntu 18.04 LTS. (CVE-2019-1010228)

    Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system     were tricked into opening a certain specially crafted input file, a remote attacker could possibly use     this issue to

    cause a denial of service. This issue only affected Ubuntu 16.04 LTS,

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687, CVE-2021-41688, CVE-2021-41689,     and CVE-2021-41690)

    Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled certain inputs. If a user or an     automated system were tricked into opening a certain specially crafted input file, a remote attacker could     possibly use this issue to execute arbitrary code. This issue only affected

    Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-2119 and     CVE-2022-2120)

    Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled pointers. If a user or an     automated system were tricked into opening a certain specially crafted input file, a remote attacker could     possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu     18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-2121)

    It was discovered that DCMTK incorrectly handled certain inputs. If a user or an automated system were     tricked into opening a certain specially crafted input file, a remote attacker could possibly use this     issue to

    cause a denial of service. This issue affected Ubuntu 16.04 LTS,

    Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-43272)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : DCMTK vulnerabilities (USN-5882-1)

critical Nessus Plugin ID 171810

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Aug 28, 2024, 7:43 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Detection (updated detection logic) Plugin metadata Plugin Feed: 202408281943
Version 1.2 Oct 21, 2023, 3:09 AM Detection Plugin metadata Plugin Feed: 202310210309
Version 1.1 Feb 23, 2023, 2:02 PM Exploit attributes ("Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202302231402
Version 1.0 Feb 23, 2023, 5:54 AM New Plugin Feed: 202302230554