CVEvulnerability

CVE-2025-14501

7.5 HIGH Published 2025-12-23 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2025-12-23
Last modified
2026-10-19
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP Content-Length header. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-26770.

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References