CVE-2022-4981

EUVD-2025-35179

21.10.2025, 15:15

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now public and may be used. Upgrading to version 3.6.8 is sufficient to resolve this issue. The patch is identified as 957fb31e5. Upgrading the affected component is advised.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.3 LOW	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
VulDB	CNA	3.3 LOW				CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 3%

Affected Products (NVD)

Vendor	Product	Version
offis	dcmtk	𝑥 < 3.6.8

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

dcmtk

bookworm	vulnerable
bullseye	vulnerable
bullseye (security)	vulnerable
forky	3.6.9-5 fixed
sid	3.6.9-5 fixed
trixie	3.6.9-5 fixed

Ubuntu Releases

Ubuntu Product

Codename

dcmtk

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
plucky	not-affected
questing	not-affected
xenial	needs-triage

Known Exploits!

Common Weakness Enumeration

CWE-404 - Improper Resource Shutdown or Release
The program does not release or incorrectly releases a resource before it is made available for re-use.

References

https://shimo.im/docs/e1Azd4dDQXUgOGqW/

https://support.dcmtk.org/redmine/issues/1026

https://vuldb.com/?ctiid.329029

https://vuldb.com/?id.329029

https://vuldb.com/?submit.673134

https://shimo.im/docs/e1Azd4dDQXUgOGqW/read