Intel® SGX SDK Advisory

Summary: Potential security vulnerabilities in the Intel® Software Guard Extensions SGX Software Development Kit SDK may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-26509 Description: Imprope...

CVE-2021-36647

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...

CVE-2021-36647

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...

Intel SGX SDK Advisory - Lenovo Support US

No description provided...

Huawei EulerOS: Security Advisory for linux-sgx (EulerOS-SA-2022-2852)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : linux-sgx (EulerOS-SA-2022-2852)

According to the versions of the linux-sgx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internal...

GSD-2022-1007885 x86/sgx: Add overflow check in sgx_validate_offset_length()

x86/sgx: Add overflow check in sgxvalidateoffsetlength This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.81 by commit...

GSD-2022-1007706 x86/sgx: Add overflow check in sgx_validate_offset_length()

x86/sgx: Add overflow check in sgxvalidateoffsetlength This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

Information disclosure

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-27499

CVE-2022-27499 : The Intel® SGX SDK contained a premature release of a resource during its expected lifetime, which may enable information disclosure via local access. The issue affects the Intel SGX SDK software for Linux prior to 2.18.100.1 and for Windows prior to 2.17.100.1. The underlying ca...

Intel® SGX SDK Advisory

Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX Software Development Kit SDK may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-27499 Description: Premature...

2022.2 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21233 Description: Improper isolation of shared resources in some IntelR...

Intel® Processors MMIO Stale Data Advisory

Summary: Potential security vulnerabilities in Memory Mapped I/O MMIO for some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21123 Description: Incomplete cleanup of...

2022.1 IPU - Intel® SGX Advisory

Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX Platform may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-0005 Description: Sensitive information accessibl...

2022.1 IPU - Intel® Processor Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21151 Description: Processor optimization removal or modification of...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2022:3293-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3293-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. Th...

Ubuntu: Security Advisory (USN-5612-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5612-1 intel-microcode vulnerability

Pietro Borrello, Andreas Kogler, Martin Schwarzl, Daniel Gruss, Michael Schwarz and Moritz Lipp discovered that some Intel processors did not properly clear data between subsequent xAPIC MMIO reads. This could allow a local attacker to compromise SGX enclaves...