Description(1) and (2) in dcmnet/apps/, (3) dcmnet/libsrc/, (4) dcmwlm/libsrc/, (5) and (6) in dcmpstat/apps/, (7) dcmpstat/tests/, and (8) dcmqrdb/apps/ in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by creating a large number of processes.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severityhigh

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
dcmtk (PTS)stretch3.6.1~20160216-4fixed
bullseye, sid, buster3.6.4-2.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs

Not running with elevated privileges in Debian packaging;a=commitdiff;h=beaf5a5c24101daeeafa48c375120b16197c9e95;hp=5349794c4c458c76609b7aeb53d0ca28cf9fe9f0

Search for package or bug name: Reporting problems