235 matches found
CVE-2022-38090
CVE-2022-38090 is listed across multiple advisories (Debian DLA, ALAS, ALAS2, Cloud Foundry USN, Astra Linux) as part of Intel microcode vulnerabilities. The core issue is improper isolation of shared resources on Intel processors when using Intel SGX, potentially enabling information disclosure ...
CVE-2022-33196
Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-33196
Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-33196
CVE-2022-33196 is an Intel microcode issue described as: Incorrect default permissions in memory controller configurations on some Intel Xeon processors when using Intel SGX, potentially enabling privilege escalation via local access. Connected sources confirm affected components and mitigations ...
SUSE CVE-2022-33196
Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...
Intel Software Guard Extensions 安全漏洞
Intel Software Guard Extensions SGX is a set of security-related instructions from the U.S. company Intel that are built into some Intel central processors. It provides hardware-based memory encryption to isolate application-specific code and data in memory. A security vulnerability exists in...
CVE-2022-33196: Incorrect Default Permissions
Incorrect default permissions in some memory controller configurations for some IntelR XeonR Processors when using IntelR Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access...
Intel Software Guard Extensions 安全漏洞
Intel Software Guard Extensions SGX is a set of security-related instructions from the U.S. company Intel that are built into some Intel central processors. It provides hardware-based memory encryption to isolate application-specific code and data in memory. A security vulnerability exists in...
CVE-2022-38090: Insecure Storage of Sensitive Information
Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...
SUSE CVE-2022-0005
Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...
Intel 2023.1 IPU – BIOS February 2023 Security Updates
Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...
PT-2023-9408 · Intel +4 · Intel Processors +4
Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions, which may allow a privileged user to...
hw: cpu: information disclosure via Intel Software Guard Extensions (SGX) Platform
A flaw was found in hw. Sensitive information accessible by physical probing of the JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to disclose information via physical access...
PT-2022-18457 · Intel · Intel Sgx Sdk
Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software affected versions not specified Description: The issue is related to the premature release of a resource during its expected lifetime, which may allow a privileged user to potentially enable information disclosure via...
Intel SGX SDK 安全漏洞
Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in the Intel SGX SDK software that stems from prematurely releasing resources, which could allow a privileged user to...
The vulnerability of the Software Guard eXtensions (SGX) processor implementation allows a hacker to gain access to protected information.
The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of accessing uninitialized data that remains in the APIC Advanced Programmable Interrupt Controller registers. Exploiting this vulnerability can allow an attacker to gain access to protected...
HPESBHF04305 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Software Guard Extensions (SGX), INTEL-SA-00614, 2022.1 IPU - Intel SGX Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...
PT-2022-15164 · Intel +1 · Intel Processors +1
Name of the Vulnerable Software and Affected Versions: Intel processors based on Sunny Cove microarchitecture, including Ice Lake Xeon-SP, Ice Lake D, Gemini Lake, Ice Lake U, Y, and Rocket Lake Description: An elevation-of-privilege issue allows attackers to affect the system. The problem, known...
The vulnerability of the Software Guard eXtensions (SGX) processor implementation lies in the insufficient validation of input data, which allows attackers to increase their privileges.
The vulnerability of the Software Guard eXtensions SGX processor implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
