CVE-2024-23914 - Vulnerability Details - OpenCVE

Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows. When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914

History

No history.

MITRE

Status: PUBLISHED

Assigner: Nozomi

Published: 2024-05-03T08:15:32.389Z

Updated: 2024-08-01T23:13:08.679Z

Reserved: 2024-01-23T15:02:55.722Z

Link: CVE-2024-23914

Vulnrichment

Updated: 2024-08-01T23:13:08.679Z

NVD

Status : Awaiting Analysis

Published: 2024-05-03T09:15:08.090

Modified: 2024-11-21T08:58:42.020

Link: CVE-2024-23914

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-23914", "assignerOrgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "state": "PUBLISHED", "assignerShortName": "Nozomi", "dateReserved": "2024-01-23T15:02:55.722Z", "datePublished": "2024-05-03T08:15:32.389Z", "dateUpdated": "2024-08-01T23:13:08.679Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://www.merative.com/merge-imaging/dicom-toolkit", "defaultStatus": "unaffected", "packageName": "Merge DICOM Toolkit C/C++ 64-bit Microsoft Windows", "platforms": ["Windows"], "product": "Merge DICOM Toolkit C/C++", "programRoutines": [{"name": "MC_Open_Association"}], "vendor": "Merative", "versions": [{"lessThanOrEqual": "v5.17.0", "status": "affected", "version": "v5.6.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Gabriele Quagliarella of Nozomi Networks found this bug during a security research activity."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.<br><br>When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception."}], "value": "Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.\n\nWhen MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-134", "description": "CWE-134 Use of Externally-Controlled Format String", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "shortName": "Nozomi", "dateUpdated": "2024-05-03T08:15:32.389Z"}, "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The issue is resolved in Merge DICOM Toolkit 5.18.0 release.<br>"}], "value": "The issue is resolved in Merge DICOM Toolkit 5.18.0 release.\n"}], "source": {"discovery": "EXTERNAL"}, "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The vulnerability can be exploited by unauthenticated attackers with a privileged position in the network. <br>As a temporary solution, until a patch is released, it is highly recommended do not expose the vulnerable component inside an untrusted network."}], "value": "The vulnerability can be exploited by unauthenticated attackers with a privileged position in the network. \nAs a temporary solution, until a patch is released, it is highly recommended do not expose the vulnerable component inside an untrusted network."}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-23914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-03T14:28:49.877832Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:merative:merge_dicom_toolkit_c_c\\+\\+:5.6.0:*:*:*:*:*:*:*"], "vendor": "merative", "product": "merge_dicom_toolkit_c_c\\+\\+", "versions": [{"status": "affected", "version": "5.6.0", "versionType": "semver", "lessThanOrEqual": "5.17.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:45:42.098Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:13:08.679Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:13:08.679Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-23914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-03T14:28:49.877832Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:merative:merge_dicom_toolkit_c_c\\+\\+:5.6.0:*:*:*:*:*:*:*"], "vendor": "merative", "product": "merge_dicom_toolkit_c_c\\+\\+", "versions": [{"status": "affected", "version": "5.6.0", "versionType": "semver", "lessThanOrEqual": "5.17.0"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-03T14:24:48.511Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Gabriele Quagliarella of Nozomi Networks found this bug during a security research activity."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Merative", "product": "Merge DICOM Toolkit C/C++", "versions": [{"status": "affected", "version": "v5.6.0", "versionType": "semver", "lessThanOrEqual": "v5.17.0"}], "platforms": ["Windows"], "packageName": "Merge DICOM Toolkit C/C++ 64-bit Microsoft Windows", "collectionURL": "https://www.merative.com/merge-imaging/dicom-toolkit", "defaultStatus": "unaffected", "programRoutines": [{"name": "MC_Open_Association"}]}], "solutions": [{"lang": "en", "value": "The issue is resolved in Merge DICOM Toolkit 5.18.0 release.\n", "supportingMedia": [{"type": "text/html", "value": "The issue is resolved in Merge DICOM Toolkit 5.18.0 release.<br>", "base64": false}]}], "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-23914"}], "workarounds": [{"lang": "en", "value": "The vulnerability can be exploited by unauthenticated attackers with a privileged position in the network. \nAs a temporary solution, until a patch is released, it is highly recommended do not expose the vulnerable component inside an untrusted network.", "supportingMedia": [{"type": "text/html", "value": "The vulnerability can be exploited by unauthenticated attackers with a privileged position in the network. <br>As a temporary solution, until a patch is released, it is highly recommended do not expose the vulnerable component inside an untrusted network.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.\n\nWhen MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.", "supportingMedia": [{"type": "text/html", "value": "Use of Externally-Controlled Format String vulnerability in Merge DICOM Toolkit C/C++ on Windows.<br><br>When MC_Open_Association() function is used to open DICOM Association and gets DICOM Application Context Name with illegal characters, it might result in an unhandled exception.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-134", "description": "CWE-134 Use of Externally-Controlled Format String"}]}], "providerMetadata": {"orgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "shortName": "Nozomi", "dateUpdated": "2024-05-03T08:15:32.389Z"}}}, "cveMetadata": {"cveId": "CVE-2024-23914", "state": "PUBLISHED", "dateUpdated": "2024-08-01T23:13:08.679Z", "dateReserved": "2024-01-23T15:02:55.722Z", "assignerOrgId": "bec8025f-a851-46e5-b3a3-058e6b0aa23c", "datePublished": "2024-05-03T08:15:32.389Z", "assignerShortName": "Nozomi"}, "dataVersion": "5.1"}