Cyber Posture

CVE-2025-0574

High

Published: 30 January 2025

Published
30 January 2025
Modified
19 February 2025
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0103 77.4th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Description

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of URLs in the web server module. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25318.

Security Summary

CVE-2025-0574 is a memory corruption vulnerability affecting Sante PACS Server installations. The flaw exists in the web server module during parsing of URLs, stemming from insufficient validation of user-supplied data, which can lead to a denial-of-service condition. No authentication is required to trigger the issue, and it has been canonized as ZDI-CAN-25318 with associated CWEs CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write).

Remote, unauthenticated attackers can exploit this vulnerability over the network with low complexity and no user interaction. By sending malformed URL requests, an attacker can induce memory corruption, resulting in a denial-of-service that disrupts availability on the targeted system. The CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) underscores its high-impact potential on system uptime without compromising confidentiality or integrity.

The Zero Day Initiative advisory ZDI-25-055 provides details on this vulnerability, published on 2025-01-30.

Details

CWE(s)
CWE-119CWE-787

Affected Products

santesoft
sante pacs server
≤ 4.0.10

References