96 matches found
sgxray
SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...
sgxray
SGXRay：自动检测 SGX 应用程序的漏洞 Intel SGX 通过基于硬件的内存加密，保护隔离的应用程序逻辑和飞地内的敏感数据。要使用这种基于硬件的安全机制，需要对内存使用采用严格的编程模型，并使用穿越飞地边界的复杂 API。飞地开发人员必须小心谨慎地编程以确保飞地安全，尤其是在处理跨越飞地可信边界的数据时。可信边界违规可能进一步导致内存损坏，并可能被攻击者利用以检索和操纵受保护的数据。目前，没有公开可用的工具能够有效检测真实飞地中的此类问题。 SGXRay 是一个基于 SMACK 验证器的自动化推理工具，能够自动检测源于可信边界违规的 SGX...
ALSA-2026:18868 Important: linux-sgx security update
The Intel SGX SDK is a collection of APIs, libraries, documentations and tools that allow software developers to create and debug Intel SGX enabled applications in C/C++. Security Fixes: qs: qs: Denial of Service via improper input validation in array parsing CVE-2025-15284 node-tar: tar: node-ta...
CVE-2022-26841
Insufficient control flow management for the IntelR SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-26509
Improper conditions check in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-27499
Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...
EUVD-2018-15480
Malware in sbrugna...
EUVD-2021-11032
Malware in sbrugna...
EUVD-2018-9836
Malware in sbrugna...
EUVD-2019-5726
Malware in sbrugna...
EUVD-2019-5727
Malware in sbrugna...
EUVD-2020-2059
Malware in sbrugna...
EUVD-2019-0929
Malware in sbrugna...
EUVD-2022-31391
Malicious code in bioql PyPI...
EUVD-2024-35044
Malicious code in bioql PyPI...
EUVD-2022-32000
Malicious code in bioql PyPI...
EUVD-2021-2805
Malicious code in bioql PyPI...
EUVD-2022-31067
Malicious code in bioql PyPI...
CVE-2025-32004: Improper Input Validation
Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...