OFFIS DCMTK and DICOM Projects

2026-03-24

09:21 DCMTK Bug #1194: OS command injection vulnerability in storescp --exec-on-reception

Also see: https://machinespirits.com/advisory/2e1627/
Marco Eichelberg

2026-03-21

18:35 DCMTK Bug #1194 (Closed): OS command injection vulnerability in storescp --exec-on-reception

Closed by DCMTK commit #edbb085e4.
Marco Eichelberg

18:23 DCMTK Bug #1194: OS command injection vulnerability in storescp --exec-on-reception

This vulnerability only affects the @storescp@ command line tool, not the underlying libraries. The vulnerability is ... Marco Eichelberg

2026-03-14

17:40 DCMTK Bug #1194 (Closed): OS command injection vulnerability in storescp --exec-on-reception

Three placeholder tokens used in the shell command execution feature (#f , #p , #r) are derived from attacker-control... Marco Eichelberg