Sante PACS Server Denial-of-Service Vulnerability via Crafted HL7 Messages

A denial-of-service vulnerability has been identified in Sante PACS Server. The issue allows remote attackers to crash the main thread of the application by sending specially crafted HL7 messages. This disruption causes the application to enter a denial-of-service state, requiring a manual restart to restore functionality. Notably, no authentication is required to exploit this vulnerability.

Impact

Exploitation of this vulnerability leads to a crash of the main application thread, causing a denial-of-service condition that requires a manual restart of the application.