Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Sante PACS Server. This issue arises from improper handling of the HTTP Content-Length header, which leads to a NULL pointer dereference. As a result, remote attackers can create a denial-of-service condition on affected installations. Notably, authentication is not required to exploit this vulnerability.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, leading to a disruption of the PACS server's normal operations.

Remediation

Users can upgrade to Sante PACS Server version 4.2.3 to address this vulnerability.