漏洞标题
Sante PACS Server DCM文件解析内存破坏拒绝服务漏洞
漏洞描述信息
Sante PACS Server DCM 文件解析内存破坏拒绝服务漏洞。此漏洞允许远程攻击者在受影响的 Sante PACS Server 安装上造成拒绝服务条件。利用此漏洞无需身份验证。
具体缺陷存在于 DCM 文件的解析过程中。该问题源于对用户提供的数据缺乏适当的验证,从而可能导致内存破坏。攻击者可利用此漏洞在系统上造成拒绝服务条件。曾为 ZDI-CAN-25303。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
跨界内存写
漏洞标题
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
漏洞描述信息
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25303.
CVSS信息
N/A
漏洞类别
内存缓冲区边界内操作的限制不恰当