<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 23:50:53 +0000</lastBuildDate>
    <item>
      <title>CVE-2021-41687</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2021-41687</link>
      <description>&lt;p&gt;DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2021-41687</guid>
    </item>
    <item>
      <title>USN-5882-1 — dcmtk vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-5882-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: dcmtk, Ubuntu:Pro:18.04:LTS: dcmtk, Ubuntu:Pro:20.04:LTS: dcmtk, Ubuntu:Pro:22.04:LTS: dcmtk&lt;/p&gt;
&lt;p&gt;Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted 
input file, a remote attacker could possibly use this issue to cause a 
denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)&lt;/p&gt;
&lt;p&gt;Omar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted 
input file, a remote attacker could possibly use this issue to cause a 
denial of service. This issue only affected Ubuntu 16.04 LTS and 
Ubuntu 18.04 LTS. (CVE-2019-1010228)&lt;/p&gt;
&lt;p&gt;Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a
user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to 
cause a denial of service. This issue only affected Ubuntu 16.04 LTS, 
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687,
CVE-2021-41688, CVE-2021-41689, and CVE-2021-41690)&lt;/p&gt;
&lt;p&gt;Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled
certain inputs. If a user or an automated system were tricked into opening
a certain specially crafted input file, a remote attacker could possibly use
this issue to execute arbitrary code. This issue only affected 
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2022-2119 and CVE-2022-2120)&lt;/p&gt;
&lt;p&gt;Sharon Brizinov and Noam Moshe discovered that…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:16.04:LTS: dcmtk, Ubuntu:Pro:18.04:LTS: dcmtk, Ubuntu:Pro:20.04:LTS: dcmtk, Ubuntu:Pro:22.04:LTS: dcmtk&lt;/p&gt;
&lt;p&gt;Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted 
input file, a remote attacker could possibly use this issue to cause a 
denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)&lt;/p&gt;
&lt;p&gt;Omar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or
an automated system were tricked into opening a certain specially crafted 
input file, a remote attacker could possibly use this issue to cause a 
denial of service. This issue only affected Ubuntu 16.04 LTS and 
Ubuntu 18.04 LTS. (CVE-2019-1010228)&lt;/p&gt;
&lt;p&gt;Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a
user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to 
cause a denial of service. This issue only affected Ubuntu 16.04 LTS, 
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687,
CVE-2021-41688, CVE-2021-41689, and CVE-2021-41690)&lt;/p&gt;
&lt;p&gt;Sharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled
certain inputs. If a user or an automated system were tricked into opening
a certain specially crafted input file, a remote attacker could possibly use
this issue to execute arbitrary code. This issue only affected 
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
(CVE-2022-2119 and CVE-2022-2120)&lt;/p&gt;
&lt;p&gt;Sharon Brizinov and Noam Moshe discovered that…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-5882-1</guid>
    </item>
  </channel>
</rss>
