Candidate: CVE-2015-8396
PublicDate: 2016-01-12 20:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8396
 http://census-labs.com/news/2016/01/11/gdcm-buffer-overflow-imageregionreaderreadintobuffer/
Description:
 Integer overflow in the ImageRegionReader::ReadIntoBuffer function in
 MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICOM
 (aka GDCM) before 2.6.2 allows attackers to execute arbitrary code via
 crafted header dimensions in a DICOM image file, which triggers a buffer
 overflow.
Ubuntu-Description:
 It was discovered that GDCM incorrectly handled certain DICOM image files. An
 attacker could possibly use this issue to cause a denial of service.
Notes:
Bugs:
Priority: medium
Discovered-by: Stelios Tsampas
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H [10.0 CRITICAL]

Patches_gdcm:
 upstream: https://sourceforge.net/p/gdcm/gdcm/ci/0f6f82052484774d072784f32105cecc79c45c19/
 upstream: http://sourceforge.net/p/gdcm/gdcm/ci/92cd6d7fe0d01c61cf68ac4ef65ef388ee252415/
 upstream: http://sourceforge.net/p/gdcm/gdcm/ci/9cbca25ff7f20c432b61eb9f4cae43a946502b66/
 upstream: http://sourceforge.net/p/gdcm/gdcm/ci/e0dd1114c82d372dd905c029ddbee4e81ed01a89/
upstream_gdcm: released (2.6.2-1)
precise_gdcm: ignored (reached end-of-life)
precise/esm_gdcm: DNE (precise was needs-triage)
trusty_gdcm: ignored (out of standard support)
trusty/esm_gdcm: needed
vivid_gdcm: ignored (reached end-of-life)
vivid/stable-phone-overlay_gdcm: DNE
vivid/ubuntu-core_gdcm: DNE
wily_gdcm: ignored (reached end-of-life)
xenial_gdcm: not-affected (2.6.2-2)
yakkety_gdcm: not-affected (2.6.2-2)
zesty_gdcm: not-affected (2.6.2-2)
artful_gdcm: not-affected (2.6.2-2)
bionic_gdcm: not-affected (2.6.2-2)
cosmic_gdcm: not-affected (2.6.2-2)
disco_gdcm: not-affected (2.6.2-2)
eoan_gdcm: not-affected (2.6.2-2)
focal_gdcm: not-affected (2.6.2-2)
groovy_gdcm: not-affected (2.6.2-2)
hirsute_gdcm: not-affected (2.6.2-2)
impish_gdcm: not-affected (2.6.2-2)
jammy_gdcm: not-affected (2.6.2-2)
devel_gdcm: not-affected (2.6.2-2)