CVE-2015-8979

Published: Feb 15, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.

Affected (2)

Products: Debian: Debian Linux · Dicom: Dcmtk

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Dicom Dcmtk	Up to 3.6.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://packetstormsecurity.com/files/140191/DCMTK-storescp-DICOM-storage-C-STORE-SCP-Remote-Stack-Buffer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://www.debian.org/security/2016/dsa-3749

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/18/2

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/94951

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5384.php

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1405919

Source: cve@mitre.org

Issue TrackingPatchThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/140191/DCMTK-storescp-DICOM-storage-C-STORE-SCP-Remote-Stack-Buffer-Overflow.html