334 matches found
CVE-2018-3615
Systems with microprocessors utilizing speculative execution and Intel software guard extensions Intel SGX may allow unauthorized disclosure of information residing in the L1 data cache from an enclave to an attacker with local user access via a side-channel analysis...
BSA-2018-687
Security Advisory ID : BSA-2018-687 Component : Kernel Revision : 1.0: Final Security researchers have identified a speculative execution side-channel method called L1 Terminal Fault L1TF also known as Foreshadow. This method impacts select microprocessor products supporting Intel® Software Guard...
SUSE-SU-2018:1534-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-9235 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Intel 6...
CVE-2018-3661
Buffer overflow in Intel system Configuration utilities selview.exe and syscfg.exe before version 14 build 11 allows a local user to crash these services potentially resulting in a denial of service...
CVE-2018-3689
The CVE affects the AESM daemon in the Intel SGX Platform Software Component for Linux prior to version 2.1.102. A local attacker can disable AESM, causing a denial of service to remote attestation. The NVD CVSSv3.1 vector indicates LOCAL access, low attack complexity, privileges required: LOW, w...
CVE-2018-3689: Undefined Security Weakness
AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...
CVE-2018-3626
Edger8r tool in the Intel SGX SDK before version 2.1.2 Linux and 1.9.6 Windows may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information...
CVE-2017-5736
An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...
Privilege escalation
An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...
CVE-2017-5736: Improper Privilege Management
An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...
Intel® SGX SDK Edger8r and Intel® Software Guard Extensions Platform Software Component
Summary: CVE-2018-3626: The Edger8r tool in the Intel® Software Guard Extensions SGX Software Development Kit SDK before version 2.1.2 Linux and 1.9.6 Windows may generate code that is susceptible to a side channel attack, potentially allowing a local user to access unauthorized information...
PT-2018-1444
Name of the Vulnerable Software and Affected Versions Intel SGX affected versions not specified Huawei VRP affected versions not specified Description The issue is related to the implementation of Intel Software Guard Extensions SGX technology and speculative execution in microprocessors. It may...
Intel® Software Guard Extensions Elevation of Privilege Vulnerability
Intel® Software Guard Extensions are Intel technologies that application developers are seeking to protect the disclosure or modification of select code and data. An elevation of privilege vulnerability exists in Intel® Software Guard Extensions. Allows an attacker to compromise the security of S...
