Examining the SymCrypt DoS Vulnerability
ID: 8fd8b81c-6866-5b6a-b5ff-2915475464d4
STIX ID: report--8fd8b81c-6866-5b6a-b5ff-2915475464d4
Feed Name: Dragos Blog
Threat Score
This report analyzes a DoS vulnerability in the SymCrypt implementation (SymCryptFdefModInvGeneric) used by bcryptprimitives.dll (and potentially cng.sys), demonstrates reproduction using the Project Zero/PoC certutil test case, and discusses the broader impact on user-mode and possible kernel-mode components and dependent third‑party software that rely on the Windows cryptographic API.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.