{"id":"CVE-2021-41689","aliases":["DEBIAN-CVE-2021-41689","DLA-3847-1","DLA-4038-1","EUVD-2021-28701","GHSA-558h-5pv9-xxg9","MGASA-2023-0083","UBUNTU-CVE-2021-41689","USN-5882-1","USN-7010-1"],"status":"published","title":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the...","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01945,"percentile":0.80342,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-06-28T09:38:17Z","modified":"2026-10-23T18:03:50Z","fixes":[{"ecosystem":"Debian:12","package":"dcmtk","fixed_in":["3.6.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dcmtk","fixed_in":["3.6.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dcmtk","fixed_in":["3.6.7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dcmtk","fixed_in":["3.6.1~20150924-5ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dcmtk","fixed_in":["3.6.2-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"dcmtk","fixed_in":["3.6.4-2.1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dcmtk","fixed_in":["3.6.4-2.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dcmtk","fixed_in":["3.6.6-5ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.1+deb10u1"}]}],"versions":["3.6.4-2.1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-1+deb11u1"}]}],"versions":["3.6.5-1"],"bundled":11},{"source":"osv","ecosystem":"Mageia:8","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.5-3.1.mga8"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20150924-5ubuntu0.1~esm1"}]}],"versions":["3.6.0-15.1","3.6.1~20150629-5","3.6.1~20150924-4","3.6.1~20150924-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3ubuntu0.1~esm1"}]}],"versions":["3.6.2-2","3.6.2-2build1","3.6.2-3","3.6.2-3build1","3.6.2-3build2","3.6.2-3build3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.1ubuntu0.1"}]}],"versions":["3.6.4-2.1","3.6.4-2.1build1","3.6.4-2.1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.1ubuntu0.1~esm1"}]}],"versions":["3.6.4-2.1","3.6.4-2.1build1","3.6.4-2.1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-5ubuntu0.1~esm1"}]}],"versions":["3.6.5-1","3.6.6-3ubuntu1","3.6.6-3ubuntu2","3.6.6-4","3.6.6-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20150924-5ubuntu0.1~esm1"}]}],"versions":["3.6.0-15.1","3.6.1~20150629-5","3.6.1~20150924-4","3.6.1~20150924-5"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3ubuntu0.1~esm1"}]}],"versions":["3.6.2-2","3.6.2-2build1","3.6.2-3","3.6.2-3build1","3.6.2-3build2","3.6.2-3build3"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.1ubuntu0.1~esm1"}]}],"versions":["3.6.4-2.1","3.6.4-2.1build1","3.6.4-2.1build2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-5ubuntu0.1~esm1"}]}],"versions":["3.6.5-1","3.6.6-3ubuntu1","3.6.6-3ubuntu2","3.6.6-4","3.6.6-5"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1~20150924-5ubuntu0.1~esm2"}]}],"versions":["3.6.0-15.1","3.6.1~20150629-5","3.6.1~20150924-4","3.6.1~20150924-5","3.6.1~20150924-5ubuntu0.1~esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2-3ubuntu0.1~esm2"}]}],"versions":["3.6.2-2","3.6.2-2build1","3.6.2-3","3.6.2-3build1","3.6.2-3build2","3.6.2-3build3","3.6.2-3ubuntu0.1~esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-2.1ubuntu0.1"}]}],"versions":["3.6.4-2.1","3.6.4-2.1build1","3.6.4-2.1build2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-5ubuntu0.1~esm2"}]}],"versions":["3.6.5-1","3.6.6-3ubuntu1","3.6.6-3ubuntu2","3.6.6-4","3.6.6-5","3.6.6-5ubuntu0.1~esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"dcmtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-9.1ubuntu0.1~esm1"}]}],"versions":["3.6.7-9","3.6.7-9.1build2","3.6.7-9.1build3","3.6.7-9.1build4"],"bundled":9}],"products":[{"vendor":"dcmtk","product":"dcmtk"},{"vendor":"offis","product":"dcmtk"}],"references":[{"url":"https://github.com/DCMTK/dcmtk","tags":["x_transferred","Product","Third Party Advisory","package","report"]},{"url":"https://github.com/DCMTK/dcmtk/commit/5c14bf53fb42ceca12bbcc0016e8704b1580920d","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00022.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00032.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41689"},{"url":"https://github.com/advisories/GHSA-558h-5pv9-xxg9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-41689","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0083.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30790","tags":["report"]},{"url":"https://dicom.offis.de/download/dcmtk/dcmtk367/ANNOUNCE","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2Z7WVDK43MKWOS23BIN4VCQRQRXHGSDB/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WF2FCZOYXVZ4ETCHO62JWUP4D55UWJCV/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5882-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-41689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41689","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7010-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8979","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-1010228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41687","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41688","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-41690","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2119","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2120","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2121","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-43272","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-28130","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34509","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-41689","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T09:38:17Z","modified":"2025-11-03T20:33:58.161Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:32:59.105382Z"}],"euvd":[{"id":"EUVD-2021-28701","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T09:38:17Z","modified":"2025-11-03T20:33:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-558h-5pv9-xxg9","title":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the...","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-29T00:00:55Z","modified":"2025-11-03T21:30:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:18.176646Z"}],"nvd":[{"id":"CVE-2021-41689","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T13:15:10.587Z","modified":"2026-06-17T04:08:48.75Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:06.501652Z"}],"osv":[{"id":"CVE-2021-41689","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T13:15:10.587Z","modified":"2026-10-20T14:28:24.741594018Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-41689","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T13:15:10.587Z","modified":"2026-10-23T18:03:50.710398114Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"UBUNTU-CVE-2021-41689","description":"DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack.","status":"published","published":"2022-06-28T13:15:00Z","modified":"2026-04-22T13:01:56.677715Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"DLA-3847-1","title":"dcmtk - security update","status":"published","published":"2024-06-28T00:00:00Z","modified":"2026-03-09T01:23:28.01278Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4038-1","title":"dcmtk - security update","status":"published","published":"2025-01-31T00:00:00Z","modified":"2026-03-09T01:18:13.121146Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2023-0083","title":"Updated dcmtk packages fix security vulnerability","description":"Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If\na user or an automated system were tricked into opening a certain\nspecially crafted input file, a remote attacker could possibly use this\nissue to cause a denial of service. (CVE-2021-41687, CVE-2021-41688,\nCVE-2021-41689, and CVE-2021-41690)\n\nSharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled\ncertain inputs. If a user or an automated system were tricked into opening\na certain specially crafted input file, a remote attacker could possibly\nuse this issue to execute arbitrary code. (CVE-2022-2119 and\nCVE-2022-2120)\n\nSharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled\npointers. If a user or an automated system were tricked into opening a\ncertain specially crafted input file, a remote attacker could possibly use\nthis issue to cause a denial of service. (CVE-2022-2121)\n\nIt was discovered that DCMTK incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to\ncause a denial of service. (CVE-2022-43272)\n","status":"published","published":"2023-03-11T19:00:39Z","modified":"2026-04-16T04:41:21.850253307Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"USN-5882-1","title":"dcmtk vulnerabilities","description":"Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or\nan automated system were tricked into opening a certain specially crafted \ninput file, a remote attacker could possibly use this issue to cause a \ndenial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2015-8979)\n\nOmar Ganiev discovered that DCMTK incorrectly handled buffers. If a user or\nan automated system were tricked into opening a certain specially crafted \ninput file, a remote attacker could possibly use this issue to cause a \ndenial of service. This issue only affected Ubuntu 16.04 LTS and \nUbuntu 18.04 LTS. (CVE-2019-1010228)\n\nJinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a\nuser or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to \ncause a denial of service. This issue only affected Ubuntu 16.04 LTS, \nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2021-41687,\nCVE-2021-41688, CVE-2021-41689, and CVE-2021-41690)\n\nSharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled\ncertain inputs. If a user or an automated system were tricked into opening\na certain specially crafted input file, a remote attacker could possibly use\nthis issue to execute arbitrary code. This issue only affected \nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-2119 and CVE-2022-2120)\n\nSharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled\npointers. If a user or an automated system were tricked into opening a\ncertain specially crafted input file, a remote attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-2121)\n\nIt was discovered that DCMTK incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to \ncause a denial of service. This issue affected Ubuntu 16.04 LTS, \nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-43272)\n","status":"published","published":"2023-02-22T18:23:35Z","modified":"2026-08-31T17:15:57.740481573Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7010-1","title":"dcmtk vulnerabilities","description":"Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If\na user or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to\ncause a denial of service. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2021-41687, CVE-2021-41688, CVE-2021-41689, CVE-2021-41690)\n\nSharon Brizinov and Noam Moshe discovered that DCMTK incorrectly handled\npointers. If a user or an automated system were tricked into opening a\ncertain specially crafted input file, a remote attacker could possibly use\nthis issue to cause a denial of service. This issue only affected\nUbuntu 20.04 LTS. (CVE-2022-2121)\n\nIt was discovered that DCMTK incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to\ncause a denial of service. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2022-43272)\n\nIt was discovered that DCMTK incorrectly handled certain inputs. If a\nuser or an automated system were tricked into opening a certain specially\ncrafted input file, a remote attacker could possibly use this issue to\nexecute arbitrary code. This issue was only addressed in Ubuntu 20.04 LTS\nand Ubuntu 22.04 LTS. (CVE-2024-28130)\n\nIt was discovered that DCMTK incorrectly handled memory when processing an\ninvalid incoming DIMSE message. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2024-34508, CVE-2024-34509)\n","status":"published","published":"2024-09-17T05:18:27Z","modified":"2026-06-25T13:32:28.676541815Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}