Lucene search

K
nvd[email protected]NVD:CVE-2024-1543
HistoryAug 29, 2024 - 11:15 p.m.

CVE-2024-1543

2024-08-2923:15:10
CWE-208
CWE-203
web.nvd.nist.gov
4
wolfssl
t-table
side-channel attack
cache-line resolution
intel sgx
vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%

The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-channel attacker with cache-line resolution. In a controlled environment such as Intel SGX, an attacker can gain a per instruction sub-cache-line resolution allowing them to break the cache-line-level protection. For details on the attack refer to: https://doi.org/10.46586/tches.v2024.i1.457-500

Affected configurations

Nvd
Node
wolfsslwolfsslRange<5.6.6
VendorProductVersionCPE
wolfsslwolfssl*cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%