325 matches found
sgx-step
一个用于精确飞地执行控制的实用攻击框架 SGX-Step 是一个开源框架，旨在促进对 Intel x86 处理器（尤其是 Intel SGX 平台）的侧信道攻击研究。SGX-Step 由一个对抗性 Linux 内核驱动和一个小的用户空间操作系统库组成，允许完全从用户空间配置非信任页表项和/或 x86 APIC 定时器中断。SGX-Step 已被用于我们自己的研究以及独立研究人员的工作中，从而实现了几种新的和改进的飞地执行攻击，这些攻击能够以最大的时间分辨率收集侧信道观测数据（即通过在执行 每条 指令后中断受害者飞地）。 许可证。 SGX-Step 是自由软件，遵循 GPLv3...
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
sgxray
SGXRay：自动检测 SGX 应用程序的漏洞 Intel SGX 通过基于硬件的内存加密，保护隔离的应用程序逻辑和飞地内的敏感数据。要使用这种基于硬件的安全机制，需要对内存使用采用严格的编程模型，并使用穿越飞地边界的复杂 API。飞地开发人员必须小心谨慎地编程以确保飞地安全，尤其是在处理跨越飞地可信边界的数据时。可信边界违规可能进一步导致内存损坏，并可能被攻击者利用以检索和操纵受保护的数据。目前，没有公开可用的工具能够有效检测真实飞地中的此类问题。 SGXRay 是一个基于 SMACK 验证器的自动化推理工具，能够自动检测源于可信边界违规的 SGX...
snapshot-demo
Snapshot Attack Demo This is the original demo of Unanticipated Snapshot Attack found by us. Thanks Intel for the Security Advisory. Build the demo Install Intel SGX SDK and Occlum First of all, anyone willing to run the demo must install Intel SGX SDK and Occlum you can choose to use our modifie...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098668)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098668 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...
Astra Linux – Vulnerability in Intel Microcode
Incorrect default permissions in some memory controller configurations for certain IntelR XeonR processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable privilege escalation through local access...
CVE-2025-35987
Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...
EUVD-2025-210693
Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...
CVE-2025-35987
CVE-2025-35987 affects Intel Software Guard Extensions Data Center Attestation Primitives (DCAP) within Ring 0. The issue is described as an omission of security-relevant information in the kernel, potentially enabling a denial of service and, with a privileged, high-complexity attacker, data alt...
CVE-2025-35987
Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...
PT-2026-70275
Omission of security-relevant information for some IntelR Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service. Authorized adversary with a privileged user combined with a high complexity attack may enable data alteration. This result ma...
ALSA-2026:18868 Important: linux-sgx security update
The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fixes: qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-ta...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013444)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013444 advisory. Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...
MiracleLinux 7 : microcode_ctl-2.1-73.2.el7 (AXSA:2020-892:06)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-892:06 advisory. hw: Information disclosure issue in Intel SGX via RAPL interface CVE-2020-8695 hw: Vector Register Leakage-Active CVE-2020-8696 hw: Fast forward stor...
CVE-2021-33097
Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...
CVE-2022-26841
Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-26509
Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...
CVE-2020-24452
Improper input validation in the IntelR SGX Platform Software for Windows may allow an authenticated user to potentially enable a denial of service via local access...