Upstream information

CVE-2024-27628 at MITRE

Description

Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method component.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

SUSE Bugzilla entry: 1227235 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 15 SP6
  • dcmtk >= 3.6.9-bp156.4.3.1
  • dcmtk-devel >= 3.6.9-bp156.4.3.1
  • libdcmtk19 >= 3.6.9-bp156.4.3.1
 Patchnames:
openSUSE-2025-53
openSUSE Leap 15.6
  • dcmtk >= 3.6.9-bp156.4.3.1
  • dcmtk-devel >= 3.6.9-bp156.4.3.1
  • libdcmtk19 >= 3.6.9-bp156.4.3.1
 Patchnames:
openSUSE-2025-53
openSUSE Tumbleweed
  • dcmtk >= 3.6.8-5.1
  • dcmtk-devel >= 3.6.8-5.1
  • libdcmtk18 >= 3.6.8-5.1
 Patchnames:
openSUSE-Tumbleweed-2024-14514

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 22:01:11 2024
CVE page last modified: Thu Feb 6 19:57:18 2025