Intel CPU Foreshadow-NG (foreshadow next-generation version) Vulnerability

The L1 Terminal Malfunction OS/SMM vulnerability is different for Intel CPUs with SGX Software Protection Extensions technology, and may also affect CPUs from other vendors. With the speculative execution of a side-channel attack, an attacker with local user access could achieve an unauthorized...

Foreshadow- L1 Terminal Fault: SGX

Systems with microprocessors utilizing speculative execution and Intel® software guard extensions Intel® SGX may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis. CVE: CVE-2018-3615 Last...

Foreshadow Attacks — 3 New Intel CPU Side-Channel Flaws Discovered

2018 has been quite a tough year for Intel. While the chip-maker giant is still dealing with Meltdown and Spectre processor vulnerabilities, yet another major speculative execution flaw has been revealed in Intel's Core and Xeon lines of processors that may leave users vulnerable to cyber-attacks...

CVE-2018-3615

Systems with microprocessors utilizing speculative execution and Intel software guard extensions Intel SGX may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis...

Design/Logic Flaw

AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...

CVE-2018-3689

The CVE affects the AESM daemon in the Intel SGX Platform Software Component for Linux prior to version 2.1.102. A local attacker can disable AESM, causing a denial of service to remote attestation. The NVD CVSSv3.1 vector indicates LOCAL access, low attack complexity, privileges required: LOW, w...

Intel Software Guard Extension Local Elevation of Privilege Vulnerability

Intel Software Guard Extensions Platform Software Component is a set of software components for the Software Guard Extensions Platform from Intel Corporation. A local elevation of privilege vulnerability exists in Intel Software Guard Extensions. A local attacker could exploit this vulnerability ...

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

Privilege escalation

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

CVE-2017-5736

CVE-2017-5736 describes a local elevation of privilege in the Intel® Software Guard Extensions Platform Software Component, vulnerable before version 1.9.105.42329. A local attacker could escalate to administrator and run arbitrary code. The accepted remediation in the sources is to update to ver...

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

Intel® SGX SDK Edger8r and Intel® Software Guard Extensions Platform Software Component

Summary: CVE-2018-3626: The Edger8r tool in the Intel® Software Guard Extensions SGX Software Development Kit SDK before version 2.1.2 Linux and 1.9.6 Windows may generate code that is susceptible to a side channel attack, potentially allowing a local user to access unauthorized information...

HPSBHF03560 rev 1 - Possible Elevation of Privilege and Information Disclosure via Intel® Software Guard Extensions (Intel® SGX) Vulnerability

Potential Security Impact Elevation of privilege, information disclosure Source: Intel Reported by: Intel VULNERABILITY SUMMARY Intel has discovered a vulnerability that could impact the security of Intel® Software Guard Extensions Intel® SGX. Before exploiting this vulnerability, the malicious...