snapshot-demo

快照攻击演示 这是我们发现的 Unanticipated Snapshot Attack 的原始演示。感谢 Intel 提供安全公告。 构建演示 安装 Intel SGX SDK 和 Occlum 首先，任何希望运行此演示的人都必须安装 Intel SGX SDK 和 Occlum（你可以选择使用我们修改过的 SGX SDK）。我们提供了一个 Dockerfile，用于快速安装 Occlum/SDK。修改后的 SGX SDK 旨在帮助攻击者判断时机。 你也可以在宿主机上安装 Occlum。（更多安装细节请参阅...

EUVD-2021-31262

Malicious code in bioql PyPI...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

Occlum 安全漏洞

Occlum is a memory-safe, multiprocess library operating system for Intel SGX. A security vulnerability in util/memutil.rs in Occlum for Intel SGX prior to version 0.26.0 stems from pointer validation logic acting as an obfuscation agent. Allows a local attacker to access unauthorized information...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

CVE-2021-44421 affects Occlum prior to 0.26.0 for Intel SGX. The pointer-validation logic in util/mem_util.rs acts as a confused deputy, allowing a local attacker to access unauthorized information via side-channel analysis. A fix is available in Occlum 0.26.0 and later; upgrade to mitigate.