Advisories » MGASA-2024-0380

Updated dcmtk packages fix security vulnerability

Publication date: 27 Nov 2024
Modification date: 27 Nov 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2024-27628

Description

A buffer overflow vulnerability in DCMTK v.3.6.8 allows an attacker to
execute arbitrary code via the EctEnhancedCT method component.
(CVE-2024-27628)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=33798
• https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/U3LXLFP2Q7LBLGBNWEPO3O2ZZ2JPCYEU/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27628

SRPMS

9/core

• dcmtk-3.6.7-4.2.mga9