Input validation

An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asy...

CVE-2021-22552

The CVE-2021-22552 entry concerns Google Asylo up to version 0.6.1, where an untrusted memory read vulnerability exists. The issue arises when an attacker can pass a syscall number in MessageReader, which is then used by sysno() and can bypass validation, enabling memory reads from within the sec...

CVE-2021-22552 Memory overread secure enclave in Asylo 0.6.2

An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno and can bypass validation. This can allow the attacker to read memory from within the secure enclave. We recommend updating to Asy...

Google Asylo 缓冲区错误漏洞

Google Asylo is a framework for developing trusted applications from Google, a US-based company. The software supports the creation of a trusted execution environment, including software isolation and hardware isolation.Google Asylo in version 0.6.1 has a memory read vulnerability vulnerability...

DEBIAN-CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

Code injection

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

UBUNTU-CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

CVE-2020-36421

CVE-2020-36421 affects Arm Mbed TLS up to version 2.22.x (before 2.23.0). A side-channel in modular exponentiation could disclose an RSA private key used in a secure enclave, causing partial confidentiality loss of the key material. The vulnerability is documented across multiple sources (e.g., A...

CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

Arm Mbed TLS 安全漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption for mbed products. A security vulnerability exists in Arm Mbed TLS versions prior to 2.23.0, which stems from the fact that a side channel in a mode power can disclose an RSA private key used in a secure encla...

CVE-2020-36421

An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed...

CVE-2021-33767

Open Enclave SDK Elevation of Privilege Vulnerability...

CVE-2021-33767

Open Enclave SDK Elevation of Privilege Vulnerability...

Privilege escalation

Open Enclave SDK Elevation of Privilege Vulnerability...

CVE-2021-33767

Open Enclave SDK Elevation of Privilege Vulnerability...

CVE-2021-33767 Open Enclave SDK Elevation of Privilege Vulnerability

...

CVE-2021-33767

The CVE concerns Open Enclave SDK with an Elevation of Privilege vulnerability. Connected sources describe an issue of insecure privilege management in the Open Enclave SDK, enabling privilege escalation. Details about affected versions or a fix are not specified in the provided documents; one PT...

CVE-2021-24117

In Apache Teaclave Rust SGX SDK 1.1.3, a side-channel vulnerability in base64 PEM file decoding allows system-level administrator attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single...