sgxray

SGXRay：自动检测 SGX 应用程序的漏洞 Intel SGX 通过基于硬件的内存加密，保护隔离的应用程序逻辑和飞地内的敏感数据。要使用这种基于硬件的安全机制，需要对内存使用采用严格的编程模型，并使用穿越飞地边界的复杂 API。飞地开发人员必须小心谨慎地编程以确保飞地安全，尤其是在处理跨越飞地可信边界的数据时。可信边界违规可能进一步导致内存损坏，并可能被攻击者利用以检索和操纵受保护的数据。目前，没有公开可用的工具能够有效检测真实飞地中的此类问题。 SGXRay 是一个基于 SMACK 验证器的自动化推理工具，能够自动检测源于可信边界违规的 SGX...

ALSA-2026:18868 Important: linux-sgx security update

The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fixes: qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-ta...

CVE-2022-26841

Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-26509

Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

EUVD-2019-5726

Malware in sbrugna...

EUVD-2019-5727

Malware in sbrugna...

EUVD-2018-15480

Malware in sbrugna...

EUVD-2018-9836

Malware in sbrugna...

EUVD-2020-2059

Malware in sbrugna...

EUVD-2019-0929

Malware in sbrugna...

EUVD-2022-31391

Malicious code in bioql PyPI...

EUVD-2022-32000

Malicious code in bioql PyPI...

EUVD-2024-35044

Malicious code in bioql PyPI...

EUVD-2021-2805

Malicious code in bioql PyPI...

EUVD-2022-31067

Malicious code in bioql PyPI...

CVE-2024-34776

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2019-14565

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...