234 matches found
SUSE-SU-2020:1864-1 Security update for nasm
nasm was updated to version 2.14.02: Fix crash due to multiple errors or warnings during the code generation pass if a list file is specified. Create all system-defined macros defore processing command-line given preprocessing directives -p, -d, -u, --pragma, --before. If debugging is enabled,...
SUSE-SU-2020:1843-1 Security update for nasm
This update for nasm fixes the following issues: nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. Fix crash due to multiple errors or warnings during the code generation pass if a list file is...
Intel CPUs Vulnerable to New 'SGAxe' and 'CrossTalk' Side-Channel Attacks
Cybersecurity researchers have discovered two distinct attacks that could be exploited against modern Intel processors to leak sensitive information from the CPU's trusted execution environments TEE. Called SGAxe, the first of the flaws is an evolution of the previously uncovered CacheOut attack...
Intel SGX and Processor Side Channel Data Leakage Vulnerabilities - Lenovo Support US
No description provided...
Unspecified Vulnerability in Baidu Rust SGX SDK
Baidu Rust SGX SDK is a Rust language development kit for Intel SGX Trusted Computing Platform from Baidu, China. A security vulnerability exists in Baidu Rust SGX SDK 1.0.8 and earlier versions. No detailed vulnerability details are available at this time...
The vulnerability of Intel Software Guard Extensions SDK, related to insufficient input data validation, allows attackers to disclose protected information, cause service failures, or gain unauthorized access to protected data.
The vulnerability of Intel Software Guard Extensions SDK relates to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...
The vulnerability of the Software Guard eXtensions (SGX) processor implementation allows a hacker to enhance their privileges.
The vulnerability of the Software Guard eXtensions SGX technology for Intel processors lies in the fact that the operation exits the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
hw: Intel SGX information leak
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...
Intel SGX Driver Input Validation Error Vulnerability
Intel SGX driver is a SGX Intel Software Security Extensions driver from Intel USA. An input validation error vulnerability exists in the Intel SGX driver. An attacker could exploit this vulnerability to cause a denial of service...
The vulnerability of Intel Software Guard Extensions SDK, related to reclaimed memory, allows a hacker to disclose protected information or cause service failures.
The vulnerability of Intel Software Guard Extensions SDK relates to the reallocation of memory. Exploiting this vulnerability can allow attackers to disclose sensitive information or cause service failures...
A week in security (February 11 – 17)
Last week on Malwarebytes Labs we discussed the return of the Sextortion Bitcoin scams, we gave you an early overview of the exploit kits in the winter of 2019, we talked about the destruction of VFEmail service, for consumers we discussed whether you should remove yourself from social media, for...
Researchers Implant "Protected" Malware On Intel SGX Enclaves
Cybersecurity researchers have discovered a way to hide malicious code in Intel SGX enclaves, a hardware-based memory encryption feature in modern processors that isolates sensitive code and data to protect it from disclosure or modification. In other words, the technique allows attackers to...
Intel SGX SDK and SGX Platform Software Elevation of Privilege Vulnerability
Intel SGX SDK and SGX Platform Software are both products of Intel Corporation, Intel SGX SDK is a software development kit based on SGX Intel Software Security Extensions technology, and SGX Platform Software is a software protection extension platform. A security vulnerability exists in Intel S...
The vulnerability of the Software Guard eXtensions processor technology allows unauthorized access to data stored in a secure zone.
The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of speculative execution of instructions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data protected by SGX, by executing attacks through peripheral...
Intel CPU Foreshadow Vulnerability
L1 terminal failure SGX vulnerability mainly exists in the models of CPUs that support Intel SGX Software Protection Extension technology, the vulnerability is named: Foreshadow Foreshadow, the use of speculation to perform a side-channel attack, with local user access rights, an attacker can...