Orthanc DICOM Server
- CISA: 48 events in the last 90 days
- Previous: 1 days earlier · CISA Adds Four Known Exploited Vulnerabilities to Catalog
What happened
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. The following versions of Orthanc DICOM Server are affected: Orthanc DICOM Server CVSS Vendor Equipment Vulnerabilities v3 8.1…
Summary assembled by rule from the sources below
Why it's spreading
Sources
Filing
- Orthanc DICOM ServerCISA Advisories