sgxray

SGXRay: SGX 앱을 위한 취약점 탐지 자동화 Intel SGX는 하드웨어 기반 메모리 암호화를 통해 격리된 애플리케이션 로직과 민감한 데이터를 보호합니다. 이러한 하드웨어 기반 보안 메커니즘을 사용하려면 메모리 사용에 대한 엄격한 프로그래밍 모델이 필요하며, 보호 영역 경계 안팎에는 복잡한 API가 있습니다. 보호 영역 개발자는 특히 신뢰할 수 있는 경계를 넘어 흐르는 데이터를 처리할 때 보호 영역 보안을 보장하기 위해 신중한 프로그래밍 방법을 적용해야 합니다. 신뢰할 수 있는 경계 위반은 메모리 손상을 일으킬 수 있으...

ALSA-2026:18868 Important: linux-sgx security update

The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fixes: qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-ta...

CVE-2022-26841

Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-26509

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

EUVD-2019-5726

Malware in sbrugna...

EUVD-2018-15480

Malware in sbrugna...

EUVD-2018-9836

Malware in sbrugna...

EUVD-2019-5727

Malware in sbrugna...

EUVD-2019-0929

Malware in sbrugna...

EUVD-2020-2059

Malware in sbrugna...

EUVD-2022-31391

Malicious code in bioql PyPI...

EUVD-2022-32000

Malicious code in bioql PyPI...

EUVD-2024-35044

Malicious code in bioql PyPI...

EUVD-2022-31067

Malicious code in bioql PyPI...

EUVD-2021-2805

Malicious code in bioql PyPI...

CVE-2024-34776

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2019-14565

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...