CVE-2022-43272 — Vulnetix

CVE-2022-43272 PUBLISHED CVSS 7.5 HIGH

DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.

EPSS 0.16% · 36.8th percentile

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.16%

36.8th percentile

Affected Products

Vendor	Product	Versions
offis	dcmtk	3.6.7
n/a	n/a	*
offis	dcmtk	3.6.7

Exploit Intelligence

https://www.wolai.com/vaVuMxU4gGqFakbzvc9NYw (nist-nvd)
https://lists.debian.org/debian-lts-announce/2025/01/msg00032.html (circl)
https://github.com/songxpu/bug_report/tree/master/DCMTK/memory_leak_in_3.6.7 (circl)
FEDORA-2023-fe6fa5696e (circl)
FEDORA-2023-83b529bd34 (circl)
FEDORA-2023-eda976b192 (circl)
[debian-lts-announce] 20240628 [SECURITY] [DLA 3847-1] dcmtk security update (circl)

Timeline

Dec 2, 2022 CVE Published
Dec 3, 2022 EPSS Score
Jan 14, 2023 EPSS Score
Feb 25, 2023 EPSS Score
Mar 7, 2023 EPSS Score
May 21, 2023 EPSS Score
Jul 2, 2023 EPSS Score
Aug 13, 2023 EPSS Score
Sep 24, 2023 EPSS Score
Nov 6, 2023 EPSS Score
Nov 9, 2023 CVE Updated
Dec 18, 2023 EPSS Score

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›