X.509DoS: Exploiting and Detecting Denial-of-Service Vulnerabilities in
summary
An automated tool generates and mutates crafted X.509 certificates to fuzz parsing and validation code, discovering 18 new vulnerabilities and confirming 12 known CVEs across seven mainstream crypto libraries. Exploits include mutual TLS client-certificate parsing that drives server CPU to 100% and Apple Trustd certificate validation via Mail that causes trustee to hang, enabling a remote zero‑click persistent DoS. Tests show crashes, memory exhaustion, and CPU exhaustion without needing CA signatures.
AI-written summary · about
chapters (8)
- 0:00X.509DoS vulnerabilities intro
- 1:34X.509 certificate chain structure
- 4:02DoS risks in crypto libraries
- 5:46Vulnerability discovery tool
- 6:52TLS handshake DoS attack
- 8:17App signature DoS threat
- 10:02macOS zero-click persistence
- 11:49Summary and resources
related talks
46mSelf-Signed, Why Not! Exploiting Insecure Certificate Validation In iOS And macOS
47mDenial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities
48mChain of Fools: An Exploration of Certificate Chain Validation Mishaps
30mHashiTLS: Demystifying Security Certs
01h 16mClassic Vulnerabilities
50mFinding Vulnerabilities In iOS/MacOS Networking Code
32mA SSLippery Slope: Unraveling the Hidden Dangers of Certificate Misuse
53mOpenSSL Deep Dive: The Good, Bad And Not-So-Ugly