CVE-2024-34509

Name of the Vulnerable Software and Affected Versions DCMTK versions prior to 3.6.9

Description The issue is related to a segmentation fault in the dcmdata component of the DCMTK library, which can be triggered by an invalid DIMSE message. This can potentially allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 3.6.9, update to version 3.6.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the dcmdata component to minimize the risk of exploitation.