Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-1543
HistoryAug 30, 2024 - 12:00 a.m.

CVE-2024-1543

2024-08-3000:00:00
ubuntu.com
ubuntu.com
1
wolfssl
t-table
side-channel
vulnerability
cache-line
resolution
intel sgx

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

Low

The side-channel protected T-Table implementation in wolfSSL up to version
5.6.5 protects against a side-channel attacker with cache-line resolution.
In a controlled environment such as Intel SGX, an attacker can gain a per
instruction sub-cache-line resolution allowing them to break the
cache-line-level protection. For details on the attack refer to:
https://doi.org/10.46586/tches.v2024.i1.457-500

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7

Confidence

Low