UBUNTU-CVE-2013-6825

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2013-6825
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-6825.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2013-6825
Upstream
Published
2014-06-10T14:55:00Z
Modified
2025-10-24T04:45:05Z
Severity
  • Ubuntu - medium
Summary
[none]
Details

(1) movescu.cc and (2) storescp.cc in dcmnet/apps/, (3) dcmnet/libsrc/scp.cc, (4) dcmwlm/libsrc/wlmactmg.cc, (5) dcmprscp.cc and (6) dcmpsrcv.cc in dcmpstat/apps/, (7) dcmpstat/tests/msgserv.cc, and (8) dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call, which allows local users to gain privileges by creating a large number of processes.

References

Affected packages

Ubuntu:Pro:24.04:LTS / dcmtk

Package

Name
dcmtk
Purl
pkg:deb/ubuntu/dcmtk@3.6.7-9.1ubuntu0.1~esm1?arch=source&distro=esm-apps/noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.7-9
3.6.7-9.1build2
3.6.7-9.1build3
3.6.7-9.1build4
3.6.7-9.1ubuntu0.1~esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "3.6.7-9.1ubuntu0.1~esm1",
            "binary_name": "dcmtk"
        },
        {
            "binary_version": "3.6.7-9.1ubuntu0.1~esm1",
            "binary_name": "libdcmtk-dev"
        },
        {
            "binary_version": "3.6.7-9.1ubuntu0.1~esm1",
            "binary_name": "libdcmtk17t64"
        }
    ]
}

Ubuntu:25.10 / dcmtk

Package

Name
dcmtk
Purl
pkg:deb/ubuntu/dcmtk@3.6.9-5build1?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.9-4
3.6.9-5
3.6.9-5build1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "3.6.9-5build1",
            "binary_name": "dcmtk"
        },
        {
            "binary_version": "3.6.9-5build1",
            "binary_name": "dcmtk-data"
        },
        {
            "binary_version": "3.6.9-5build1",
            "binary_name": "libdcmtk-dev"
        },
        {
            "binary_version": "3.6.9-5build1",
            "binary_name": "libdcmtk19"
        }
    ]
}

Ubuntu:25.04 / dcmtk

Package

Name
dcmtk
Purl
pkg:deb/ubuntu/dcmtk@3.6.9-4?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6.8-6
3.6.8-7
3.6.9-4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "3.6.9-4",
            "binary_name": "dcmtk"
        },
        {
            "binary_version": "3.6.9-4",
            "binary_name": "dcmtk-data"
        },
        {
            "binary_version": "3.6.9-4",
            "binary_name": "libdcmtk-dev"
        },
        {
            "binary_version": "3.6.9-4",
            "binary_name": "libdcmtk19"
        }
    ]
}