658 matches found
CVE-2022-46487
Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...
CVE-2023-38021
CVE-2023-38021 relates to Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform prior to 3.32 for Intel SGX. A lack of pointer-alignment validation in enclave_ecall entry functions enables a local attacker to access unauthorized information via the system call layer. Impact is describe...
CVE-2023-38023
An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...
CVE-2023-38022
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.29 for Intel SGX. Insufficient pointer validation allows a local attacker to access unauthorized information. This relates to strlen and sgxiswithinuser...
CVE-2022-46486
SCONE CVE-2022-46486 affects the Confidential Computing Platform where the __scone_dispatch component in Intel SGX-enabled deployments lacks pointer-validation logic in versions before 5.8.0. This flaw can allow an attacker to access sensitive information. Affected software: SCONE prior to 5.8.0 ...
CVE-2023-38022
Fortanix EnclaveOS CCM Platform (Intel SGX) before 3.29 is affected by insufficient pointer validation in the strlen/sgx_is_within_user logic, enabling a local attacker with low privileges to access unauthorized information. Impact: confidentiality only (high). Exploitation details not fully desc...
CVE-2022-46487
Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...
CVE-2023-38023
An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in sconedispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."...
CVE-2023-38021
An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager CCM Platform before 3.32 for Intel SGX. Lack of pointer-alignment validation logic in entry functions allows a local attacker to access unauthorized information. This relates to the enclaveecall function and system call...
CVE-2023-38023
SCONE Confidential Computing Platform before 5.8.0 (Intel SGX) is affected. The root cause is lack of pointer-alignment logic in __scone_dispatch and other entry functions, enabling a local attacker to access unauthorized information (AEPIC Leak). Affected component: scone dispatch/entry points. ...
CVE-2022-46487
SCONE vulnerability CVE-2022-46487: In SCONE before 5.8.0, the __scone_entry component improperly initializes x87 and SSE floating-point configuration registers, enabling a local attacker with SGX enclaves to compromise execution integrity of FP operations or exfiltrate information via side-chann...
Huawei EulerOS: Security Advisory for linux-sgx (EulerOS-SA-2023-3047)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The Bug Report – August 2023 Edition
The Bug Report – August 2023 Edition By Charles McFarland · September 06, 2023 Why am I here? Welcome back to The Bug Report, the hotter-than-hell Texas edition! For those still unfamiliar with our monthly escapades, every month our trusty Advanced Research Center vulnerability research team...
sgxwallet 代码问题漏洞
Sgxwallet is an open source, high-performance hardware-secured crypto wallet based on Intel Sgx technology. A security vulnerability exists in skalenetwork sgxwallet v.1.9.0 and earlier versions that originated from a vulnerability that allows an attacker to cause a denial of service via the...
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:3382-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3382-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some...
USN-6286-1: Intel Microcode vulnerabilities
Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 It was discovered that some IntelR XeonR Processor...
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:3289-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3289-1 advisory. - Updated to Intel CPU Microcode 20230808 release. bsc1214099 - CVE-2022-40982: Fixed a potential security vulnerability in some Intel?...
CVE-2022-41804
Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
