Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2019-0865

Опубликовано: 09 июл. 2019
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

SymCrypt Denial of Service Vulnerability

A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.

An attacker could exploit the vulnerability by creating a specially crafted connection or message.

The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures.

Обновления

ПродуктСтатьяОбновление
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems

Показывать по

Возможность эксплуатации

Publicly Disclosed

Yes

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 92%
0.0859
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures., aka 'SymCrypt Denial of Service Vulnerability'.

CVSS3: 7.5
github
больше 3 лет назад

A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures., aka 'SymCrypt Denial of Service Vulnerability'.

CVSS3: 7.5
fstec
больше 6 лет назад

Уязвимость библиотеки SymCrypt операционной системы Windows, связанная с ошибками проверки цифровой подписи, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 92%
0.0859
Низкий

7.5 High

CVSS3