CVE-2022-2120 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-2120 Interim 1 7 2025-02-16T03:26:38Z current 2022-10-13T13:41:34Z 2025-02-16T03:26:38Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-2120 OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K67WDY4JVASQKGAJHGMCE45SJSPPFKPM/ E-Mail link for openSUSE-SU-2022:10144-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OTK3TBM5PVZQBCMNB7R6KN74EKSALYHH/ E-Mail link for openSUSE-SU-2022:10145-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MKL5XGJX4U2PD4XAVAZG2YAU2LYKLQIH/ E-Mail link for openSUSE-SU-2023:0108-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP3 SUSE Package Hub 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 dcmtk-3.6.7-bp154.2.3.1 dcmtk-devel-3.6.7-bp154.2.3.1 gdcm-3.0.19-bp153.2.8.1 gdcm-3.0.19-bp154.2.5.1 gdcm-applications-3.0.19-bp153.2.8.1 gdcm-applications-3.0.19-bp154.2.5.1 gdcm-devel-3.0.19-bp153.2.8.1 gdcm-devel-3.0.19-bp154.2.5.1 gdcm-examples-3.0.19-bp153.2.8.1 gdcm-examples-3.0.19-bp154.2.5.1 libdcmtk17-3.6.7-bp154.2.3.1 libgdcm3_0-3.0.19-bp153.2.8.1 libgdcm3_0-3.0.19-bp154.2.5.1 libsocketxx1_2-3.0.19-bp153.2.8.1 libsocketxx1_2-3.0.19-bp154.2.5.1 orthanc-1.11.2-bp153.2.13.1 orthanc-1.11.2-bp154.2.3.1 orthanc-devel-1.11.2-bp153.2.13.1 orthanc-devel-1.11.2-bp154.2.3.1 orthanc-doc-1.11.2-bp153.2.13.1 orthanc-doc-1.11.2-bp154.2.3.1 orthanc-gdcm-1.5-bp153.2.6.1 orthanc-gdcm-1.5-bp154.2.3.1 orthanc-source-1.11.2-bp153.2.13.1 orthanc-source-1.11.2-bp154.2.3.1 orthanc-webviewer-2.8-bp153.2.3.1 orthanc-webviewer-2.8-bp154.2.3.1 python3-gdcm-3.0.19-bp153.2.8.1 python3-gdcm-3.0.19-bp154.2.5.1 gdcm-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 gdcm-applications-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 gdcm-devel-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 gdcm-examples-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 libgdcm3_0-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 libsocketxx1_2-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 orthanc-1.11.2-bp153.2.13.1 as a component of SUSE Package Hub 15 SP3 orthanc-devel-1.11.2-bp153.2.13.1 as a component of SUSE Package Hub 15 SP3 orthanc-doc-1.11.2-bp153.2.13.1 as a component of SUSE Package Hub 15 SP3 orthanc-gdcm-1.5-bp153.2.6.1 as a component of SUSE Package Hub 15 SP3 orthanc-source-1.11.2-bp153.2.13.1 as a component of SUSE Package Hub 15 SP3 orthanc-webviewer-2.8-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 python3-gdcm-3.0.19-bp153.2.8.1 as a component of SUSE Package Hub 15 SP3 dcmtk-3.6.7-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 dcmtk-devel-3.6.7-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 gdcm-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 gdcm-applications-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 gdcm-devel-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 gdcm-examples-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 libdcmtk17-3.6.7-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 libgdcm3_0-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 libsocketxx1_2-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 orthanc-1.11.2-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 orthanc-devel-1.11.2-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 orthanc-doc-1.11.2-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 orthanc-gdcm-1.5-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 orthanc-source-1.11.2-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 orthanc-webviewer-2.8-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 python3-gdcm-3.0.19-bp154.2.5.1 as a component of SUSE Package Hub 15 SP4 gdcm-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 gdcm-applications-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 gdcm-devel-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 gdcm-examples-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 libgdcm3_0-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 libsocketxx1_2-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 orthanc-1.11.2-bp153.2.13.1 as a component of openSUSE Leap 15.3 orthanc-devel-1.11.2-bp153.2.13.1 as a component of openSUSE Leap 15.3 orthanc-doc-1.11.2-bp153.2.13.1 as a component of openSUSE Leap 15.3 orthanc-gdcm-1.5-bp153.2.6.1 as a component of openSUSE Leap 15.3 orthanc-source-1.11.2-bp153.2.13.1 as a component of openSUSE Leap 15.3 orthanc-webviewer-2.8-bp153.2.3.1 as a component of openSUSE Leap 15.3 python3-gdcm-3.0.19-bp153.2.8.1 as a component of openSUSE Leap 15.3 dcmtk-3.6.7-bp154.2.3.1 as a component of openSUSE Leap 15.4 dcmtk-devel-3.6.7-bp154.2.3.1 as a component of openSUSE Leap 15.4 gdcm-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 gdcm-applications-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 gdcm-devel-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 gdcm-examples-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 libdcmtk17-3.6.7-bp154.2.3.1 as a component of openSUSE Leap 15.4 libgdcm3_0-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 libsocketxx1_2-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 orthanc-1.11.2-bp154.2.3.1 as a component of openSUSE Leap 15.4 orthanc-devel-1.11.2-bp154.2.3.1 as a component of openSUSE Leap 15.4 orthanc-doc-1.11.2-bp154.2.3.1 as a component of openSUSE Leap 15.4 orthanc-gdcm-1.5-bp154.2.3.1 as a component of openSUSE Leap 15.4 orthanc-source-1.11.2-bp154.2.3.1 as a component of openSUSE Leap 15.4 orthanc-webviewer-2.8-bp154.2.3.1 as a component of openSUSE Leap 15.4 python3-gdcm-3.0.19-bp154.2.5.1 as a component of openSUSE Leap 15.4 OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution. CVE-2022-2120 SUSE Package Hub 15 SP3:gdcm-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:gdcm-applications-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:gdcm-devel-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:gdcm-examples-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:libgdcm3_0-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:libsocketxx1_2-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP3:orthanc-1.11.2-bp153.2.13.1 SUSE Package Hub 15 SP3:orthanc-devel-1.11.2-bp153.2.13.1 SUSE Package Hub 15 SP3:orthanc-doc-1.11.2-bp153.2.13.1 SUSE Package Hub 15 SP3:orthanc-gdcm-1.5-bp153.2.6.1 SUSE Package Hub 15 SP3:orthanc-source-1.11.2-bp153.2.13.1 SUSE Package Hub 15 SP3:orthanc-webviewer-2.8-bp153.2.3.1 SUSE Package Hub 15 SP3:python3-gdcm-3.0.19-bp153.2.8.1 SUSE Package Hub 15 SP4:dcmtk-3.6.7-bp154.2.3.1 SUSE Package Hub 15 SP4:dcmtk-devel-3.6.7-bp154.2.3.1 SUSE Package Hub 15 SP4:gdcm-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:gdcm-applications-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:gdcm-devel-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:gdcm-examples-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:libdcmtk17-3.6.7-bp154.2.3.1 SUSE Package Hub 15 SP4:libgdcm3_0-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:libsocketxx1_2-3.0.19-bp154.2.5.1 SUSE Package Hub 15 SP4:orthanc-1.11.2-bp154.2.3.1 SUSE Package Hub 15 SP4:orthanc-devel-1.11.2-bp154.2.3.1 SUSE Package Hub 15 SP4:orthanc-doc-1.11.2-bp154.2.3.1 SUSE Package Hub 15 SP4:orthanc-gdcm-1.5-bp154.2.3.1 SUSE Package Hub 15 SP4:orthanc-source-1.11.2-bp154.2.3.1 SUSE Package Hub 15 SP4:orthanc-webviewer-2.8-bp154.2.3.1 SUSE Package Hub 15 SP4:python3-gdcm-3.0.19-bp154.2.5.1 openSUSE Leap 15.3:gdcm-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:gdcm-applications-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:gdcm-devel-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:gdcm-examples-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:libgdcm3_0-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:libsocketxx1_2-3.0.19-bp153.2.8.1 openSUSE Leap 15.3:orthanc-1.11.2-bp153.2.13.1 openSUSE Leap 15.3:orthanc-devel-1.11.2-bp153.2.13.1 openSUSE Leap 15.3:orthanc-doc-1.11.2-bp153.2.13.1 openSUSE Leap 15.3:orthanc-gdcm-1.5-bp153.2.6.1 openSUSE Leap 15.3:orthanc-source-1.11.2-bp153.2.13.1 openSUSE Leap 15.3:orthanc-webviewer-2.8-bp153.2.3.1 openSUSE Leap 15.3:python3-gdcm-3.0.19-bp153.2.8.1 openSUSE Leap 15.4:dcmtk-3.6.7-bp154.2.3.1 openSUSE Leap 15.4:dcmtk-devel-3.6.7-bp154.2.3.1 openSUSE Leap 15.4:gdcm-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:gdcm-applications-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:gdcm-devel-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:gdcm-examples-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:libdcmtk17-3.6.7-bp154.2.3.1 openSUSE Leap 15.4:libgdcm3_0-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:libsocketxx1_2-3.0.19-bp154.2.5.1 openSUSE Leap 15.4:orthanc-1.11.2-bp154.2.3.1 openSUSE Leap 15.4:orthanc-devel-1.11.2-bp154.2.3.1 openSUSE Leap 15.4:orthanc-doc-1.11.2-bp154.2.3.1 openSUSE Leap 15.4:orthanc-gdcm-1.5-bp154.2.3.1 openSUSE Leap 15.4:orthanc-source-1.11.2-bp154.2.3.1 openSUSE Leap 15.4:orthanc-webviewer-2.8-bp154.2.3.1 openSUSE Leap 15.4:python3-gdcm-3.0.19-bp154.2.5.1 critical 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H