Packages / Debian 13 (Trixie) / science / dcmtk-data

Package: dcmtk-data (3.6.9-5+deb13u2)

OFFIS DICOM toolkit data files

Download dcmtk-data

ArchitecturePackage sizeInstalled sizeFilesPackage
all288 KiB4.7 MiBlist of filesDownload

Rutas de archivos del paquete (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.6.9-5+deb13u2trixie / mainallDebian 13 · main · amd64288 KiB4.7 MiBpool/main/d/dcmtk/dcmtk-data_3.6.9-5+deb13u2_all.deb
3.6.9-5+deb13u2trixie / mainallDebian 13 · main · arm64288 KiB4.7 MiBpool/main/d/dcmtk/dcmtk-data_3.6.9-5+deb13u2_all.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVEGravedadImpacto por versión
[CVE-2026-44031]

Published:

Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of service (stack exhau

High(8.7)Afectada
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 13

[CVE-2026-44038]

Published:

A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an attacker to read memory beyond the extend_t

Medium(4.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-44037]

Published:

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attac

Medium(6.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-44036]

Published:

Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS DCMTK 3.7.0 allows a

Medium(6.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-44035]

Published:

Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and process crash) via a

Medium(6.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-44034]

Published:

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a cr

Medium(4.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-44033]

Published:

Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service

Medium(6.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-97059]

Published:

DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Att

High(8.8)Desconocido
Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

  • 3.6.9-5+deb13u2 · all · trixie

    Desconocido

    Version impact unknown

    nvd · dcmtk · debian · bookworm; pypi · dcmtk · debian · 12; pypi · dcmtk · debian · 13; pypi · dcmtk · debian · 14

[CVE-2026-35505]

Published:

An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory grows until the service is killed and the port stops respond

High(8.7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

[CVE-2026-44628]

Published:

An unauthenticated attacker can crash the worklist server with a single crafted query when the server has a valid Called AE Title / storage directory, the expected lockfile, and at least one matching

High(8.7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

[CVE-2026-50003]

Published:

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

Critical(9.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

[CVE-2026-50254]

Published:

An unauthenticated remote attacker can repeatedly send a single crafted connection request to leak memory. Against storescp in its default single-process mode, memory grows quickly and the service is

High(8.7)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

[CVE-2026-52868]

Published:

An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separat

High(8.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Afectada · Corregida: 3.6.9-5+deb13u3

    nvd · dcmtk · debian · 13

[CVE-2026-12805]

Published:

A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a manipulation can lead to heap-based buffer o

Medium(6.3)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u2

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u2

    nvd · dcmtk · debian · 13

[CVE-2026-10194]

Published:

A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp.

Medium(6.3)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    nvd · dcmtk · debian · 13

[CVE-2026-5663]

Published:

A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performi

Critical(9.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    nvd · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    nvd · dcmtk · debian · 13

[CVE-2025-14841]

Published:

dcmtk: CVE-2025-14841

Medium(5.5)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

[CVE-2025-14607]

Published:

dcmtk: CVE-2025-14607

Medium(6.3)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

[CVE-2025-9732]

Published:

dcmtk: CVE-2025-9732

High(7.8)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5+deb13u1

    dsa · dcmtk · debian · 13

[CVE-2025-2357]

Published:

dcmtk: CVE-2025-2357

Medium(6.3)Desconocido

La asociación de paquetes está en curso. Observado:

Detalles (2)
  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5

    dsa · dcmtk · debian · 13

  • 3.6.9-5+deb13u2 · all · trixie

    Corregida · Corregida: 3.6.9-5

    dsa · dcmtk · debian · 13

[Más resultados]

Última sincronización:

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.6.9-5+deb13u2 / allObservado Sep 1, 2026sha256 c54c845f5975…a0cebe89Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): c54c845f59757774a70c65acb81021270c3696ce9f25a551fbdb1da9a0cebe89

Verificar descarga

printf '%s %s\n' 'c54c845f59757774a70c65acb81021270c3696ce9f25a551fbdb1da9a0cebe89' 'dcmtk-data_3.6.9-5+deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

3.6.9-5+deb13u2 / allObservado Sep 1, 2026sha256 c54c845f5975…a0cebe89Resumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha256): c54c845f59757774a70c65acb81021270c3696ce9f25a551fbdb1da9a0cebe89

Verificar descarga

printf '%s %s\n' 'c54c845f59757774a70c65acb81021270c3696ce9f25a551fbdb1da9a0cebe89' 'dcmtk-data_3.6.9-5+deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Fuentes

  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Prueba de firma

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified