Vulnerabilities > CVE-2022-2121 - NULL Pointer Dereference vulnerability in Offis Dcmtk

CVSS 3.3 - LOW

Attack vector

ADJACENT_NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

low complexity

offis

CWE-476

NVD

Published: 2022-06-24

Updated: 2022-07-05

Summary

OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition.

Vulnerable Configurations

Part	Description	Count
Application	Offis Offis Dcmtk 3.1.0 Offis Dcmtk 3.1.1 Offis Dcmtk 3.1.2 Offis Dcmtk 3.2.0 Offis Dcmtk 3.2.1 Offis Dcmtk 3.3.0 Offis Dcmtk 3.3.1 Offis Dcmtk 3.4.0 Offis Dcmtk 3.4.1 Offis Dcmtk 3.4.2 Offis Dcmtk 3.5.0 Offis Dcmtk 3.5.1 Offis Dcmtk 3.5.2 Offis Dcmtk 3.5.3 Offis Dcmtk 3.5.4 Offis Dcmtk 3.6.0 Offis Dcmtk 3.6.2 Offis Dcmtk 3.6.3 Offis Dcmtk 3.6.4 Offis Dcmtk 3.6.5 Offis Dcmtk 3.6.6	21

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01