66 matches found
CVE-2021-43228
SymCrypt Denial of Service Vulnerability...
CVE-2021-43228
SymCrypt Denial of Service Vulnerability...
CVE-2021-43228
SymCrypt Denial of Service Vulnerability...
Denial of service
SymCrypt Denial of Service Vulnerability...
CVE-2021-43228
CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...
CVE-2021-43228 SymCrypt Denial of Service Vulnerability
...
EUVD-2021-30172
SymCrypt Denial of Service Vulnerability...
CVE-2021-43228: Undefined Security Weakness
SymCrypt Denial of Service Vulnerability...
SymCrypt Denial of Service Vulnerability
...
KLA12387 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...
Microsoft Windows SymCrypt resource management error vulnerability
Microsoft Windows SymCrypt is a U.S. Microsoft SymCrypt is the core cryptographic library currently used by Windows. A resource management error vulnerability exists in Microsoft Windows SymCrypt. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows ...
PT-2021-6338
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The SymCrypt library in the Windows operating system contains a denial-of-service vulnerability related to uncontrolled resource consumption. This issue can be exploited by a remote attacker ...
cryptofuzz:cryptofuzz-boringssl-noasm: Use-of-uninitialized-value in SymCryptEcpointMultiScalarMulWnafWithInterleaving
Detailed Report: https://oss-fuzz.com/testcase?key=5722989050068992 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-boringssl-noasm Job Type: libfuzzermsancryptofuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service Exploit
There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've been able to construct an X.509 certificate that triggers the bug. I've found that...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've...
Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service
There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've been able to construct an X.509 certificate that triggers the bug. I've found that...
SymCrypt Disclosure
The vulnerability of the SymCrypt library in the Windows operating system is related to errors in cryptographic transformations. Exploiting this vulnerability can allow an attacker to disclose protected information during the OAEP decryption process...
CVE-2019-1171
An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected...
CVE-2019-1171
An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected...