CVE-2025-14501: fallo de gravedad alta en Sante PACS Server
Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.5epss 0.8%
Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of HTTP Content-Length header. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-26770.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Productos afectados
Sante · PACS ServerCVEs relacionadas — Sante PACS Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2272CRITICALCVE-2022-2272EPSS 2.8%CVE-2025-0573MEDIUMSante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write VulnerabilityEPSS 1.9%CVE-2025-0572MEDIUMSante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write VulnerabilityEPSS 1.6%CVE-2024-1863CRITICALSante PACS Server Token Endpoint SQL Injection Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-0569HIGHSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service VulnerabilityEPSS 1.0%CVE-2025-0568HIGHSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service VulnerabilityEPSS 1.0%