Lucene search
+L

658 matches found

Prion
Prion
added 2022/05/12 5:15 p.m.22 views

Information disclosure

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

2.1CVSS4AI score0.00198EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/05/12 5:15 p.m.37 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS6.8AI score0.00266EPSS
SaveExploits0References3
Prion
Prion
added 2022/05/12 5:15 p.m.21 views

Design/Logic Flaw

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

2.1CVSS5AI score0.00266EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/12 4:36 p.m.35 views

CVE-2022-0005

Sensitive information accessible by physical probing of JTAG interface for some IntelR Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access...

4.4AI score0.00198EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/12 4:36 p.m.152 views

CVE-2022-0005

CVE-2022-0005 concerns a potential information disclosure via the JTAG interface on Intel SGX-enabled CPUs. The provided documents confirm a physical-access vulnerability affecting SGX-enabled processors, with related Nessus/ALAS advisories listing CVE-2022-0005 alongside CVEs 2022-21131, 2022-21...

2.4CVSS4AI score0.00198EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/05/12 4:35 p.m.32 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

6AI score0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/05/12 4:35 p.m.4 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.1AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2022/05/12 4:35 p.m.111 views

CVE-2021-33135

Technical details about CVE-2021-33135 are not included in the provided connected documents. The material only reiterates a general DoS risk in Linux kernel SGX drivers. Monitor for official advisories for affected platforms and mitigations.

5.5CVSS5.5AI score0.00266EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2022/05/12 4:35 p.m.65 views

CVE-2021-33135

Uncontrolled resource consumption in the Linux kernel drivers for IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

5.5CVSS5.5AI score0.00266EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/05/12 12:00 a.m.18 views

Intel SGX Linux kernel drivers 资源管理错误漏洞

Intel SGX driver is an SGX Intel Software Security Extensions driver from Intel Corporation USA. A security vulnerability exists in the Intel SGX Linux kernel driver that originates from uncontrolled resource consumption in the kernel. The vulnerability can be exploited by an authenticated user t...

5.5CVSS6.9AI score0.00266EPSS
SaveExploits0References8
Hewlett-Packard
Hewlett-Packard
added 2022/05/10 12:00 a.m.149 views

Intel 2022.1 IPU BIOS Security Updates

Intel has informed HP of potential security vulnerabilities identified in some Intel® Processors, in BIOS firmware or BIOS authenticated code module for some Intel® Processors, and in the Intel® Software Guard Extensions SGX Platform which may allow escalation of privilege, information disclosure...

7.8CVSS2.4AI score0.00347EPSS
SaveExploits0Affected Software840
OSV
OSV
added 2022/04/24 9:01 p.m.12 views

GSD-2022-1001281 selftests/sgx: Fix NULL-pointer-dereference upon early test failure

selftests/sgx: Fix NULL-pointer-dereference upon early test failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
SaveExploits0
NVD
NVD
added 2022/03/10 5:44 p.m.29 views

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

5.5CVSS0.00436EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/10 5:44 p.m.19 views

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

5.5CVSS6.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2022/03/06 8:03 p.m.24 views

CVE-2021-44421

The pointer-validation logic in util/memutil.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis...

5.5AI score0.00436EPSS
SaveExploits1References4
CVE
CVE
added 2022/03/06 8:03 p.m.90 views

CVE-2021-44421

CVE-2021-44421 affects Occlum prior to 0.26.0 for Intel SGX. The pointer-validation logic in util/mem_util.rs acts as a confused deputy, allowing a local attacker to access unauthorized information via side-channel analysis. A fix is available in Occlum 0.26.0 and later; upgrade to mitigate.

5.5CVSS5.2AI score0.00436EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.35 views

Mageia: Security Advisory (MGASA-2019-0334)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.3AI score0.03133EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.35 views

Mageia: Security Advisory (MGASA-2019-0413)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.3AI score0.03133EPSS
SaveExploits0References10
NVD
NVD
added 2021/11/17 8:15 p.m.28 views

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

6.6CVSS0.00549EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/17 8:15 p.m.9 views

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

6.7CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder