snapshot-demo

Démo de l’attaque par snapshot Ceci est la démo originale de l’attaque par snapshot non anticipée que nous avons découverte. Merci à Intel pour l’avis de sécurité. Construire la démo Installer le SDK Intel SGX et Occlum Tout d’abord, toute personne souhaitant exécuter la démo doit installer le SD...

EUVD-2021-31262

Malicious code in bioql PyPI...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

Occlum 安全漏洞

Occlum is a memory-safe, multiprocess library operating system for Intel SGX. A security vulnerability in util/memutil.rs in Occlum for Intel SGX prior to version 0.26.0 stems from pointer validation logic acting as an obfuscation agent. Allows a local attacker to access unauthorized information...

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

CVE-2021-44421

CVE-2021-44421 affects Occlum prior to 0.26.0 for Intel SGX. The pointer-validation logic in util/mem_util.rs acts as a confused deputy, allowing a local attacker to access unauthorized information via side-channel analysis. A fix is available in Occlum 0.26.0 and later; upgrade to mitigate.