PT-2018-1444 · Intel+2 · Intel Sgx+2
Baris Kasikci
+9
·
Publicado
2018-01-03
·
Atualizado
2020-08-24
·
CVE-2018-3615
CVSS v3.1
7.3
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Intel SGX (affected versions not specified)
Huawei VRP (affected versions not specified)
Description
The issue is related to the implementation of Intel Software Guard Extensions (SGX) technology and speculative execution in microprocessors. It may allow unauthorized disclosure of information from an enclave to an attacker with local user access via a side-channel analysis. This can enable an attacker to read data from the L1 cache, which may contain fragments of data from the protected area after speculative execution.
Recommendations
For Intel SGX, consider disabling speculative execution as a temporary workaround until a patch is available.
For Huawei VRP, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Side Channel Attack
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Huawei Vrp
Intel Sgx