CVE-2022-46487

Mô tả

Tham khảo

• jovanbulck.github.io/files/acsac20-fpu.pdf · Exploit
• jovanbulck.github.io/files/oakland24-pandora.pdf · Exploit
• nvd.nist.gov/vuln/detail/CVE-2020-0561 · Third Party Advisory
• nvd.nist.gov/vuln/detail/CVE-2020-15107 · Third Party Advisory
• sconedocs.github.io/release5.7 · Release Notes
• intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html · Technical Description

Lỗ hổng khác của scone

• CVE-2024-29971NGHIÊM TRỌNG 9.8Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.
• CVE-2023-38023TRUNG BÌNH 5.5An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_disp…
• CVE-2022-46486TRUNG BÌNH 5.5A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensiti…