Source: dcmtk Version: 3.7.0+really3.7.0-7 X-Debbugs-CC: [email protected] Severity: important Tags: security upstream Forwarded: https://support.dcmtk.org/redmine/issues/1215
Hi, The following vulnerability was published for dcmtk. CVE-2026-44035[0]: | Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in | dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker | to cause a denial of service (stack exhaustion and process crash) | via a crafted DICOMDIR file with a deeply chained sequence of | directory records linked through the Offset of Referenced Lower- | Level Directory Entity attribute. Any application that opens the | DICOMDIR is affected, including dcmgpdir and media viewers built on | DCMTK. The issue is fixed in commit | ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-44035 https://www.cve.org/CVERecord?id=CVE-2026-44035 [1] https://support.dcmtk.org/redmine/issues/1215 [2] https://github.com/DCMTK/dcmtk/commit/ca761f7f3dcaaddaa95be87cf5d736138d7c3a9f Please adjust the affected versions in the BTS as needed. Regards, Salvatore
