CVE-2015-8979

HIGH 7.5CVE-2015-8979 · Published 15/02/2017 · updated 17/06/2026

In short

CVE-2015-8979 is a HIGH (CVSS 7.5) vulnerability affecting dcmtk (dicom).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dcmtk dicom	`≤ 3.6.0`	No fix yet

Description

Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a long string sent to TCP port 4242.

References

packetstormsecurity.com/files/140191/DCMTK-storescp-DICOM-storage-C-STORE-SCP-Remote-Stack-Buffer-Overflow.html · Exploit
debian.org/security/2016/dsa-3749 · Third Party Advisory
openwall.com/lists/oss-security/2016/12/18/2 · Mailing List
securityfocus.com/bid/94951 · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2016-5384.php · Exploit
bugzilla.redhat.com/show_bug.cgi · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free