Martin Schwarzl

**Name of the Vulnerable Software and Affected Versions** Cloudflare version of zlib library (affected versions not specified) **Description** The Cloudflare version of the zlib library was found to have memory corruption issues due to improper input validation and heap-based buffer overflow in the deflation algorithm implementation. A local attacker could exploit this issue during compression using a crafted malicious file, potentially leading to denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SCONE Confidential Computing Platform versions prior to 5.8.0 **Description** An issue was discovered in the SCONE Confidential Computing Platform, where the lack of pointer-alignment logic in ` scone dispatch` and other entry functions allows a local attacker to access unauthorized information, also known as an "AEPIC Leak". This issue affects the Intel SGX platform. **Recommendations** For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the ` scone dispatch` function and other affected entry functions until a patch is available.

**Name of the Vulnerable Software and Affected Versions** AMD processors (affected versions not specified) ARM processors (affected versions not specified) Intel processors (affected versions not specified) **Description** A potential power side-channel vulnerability may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time, potentially resulting in a leak of sensitive information. The vulnerability, known as Collide+Power, can be exploited to obtain confidential data, such as passwords or encryption keys. It is estimated that almost all modern processors are affected, including those from AMD, ARM, and Intel. However, the vulnerability is considered difficult to exploit, and the speed of data leakage is relatively low, making it unlikely to be used for attacks on end-users. The vulnerability can be used to enhance other software side-channel attacks, such as PLATYPUS and Hertzbleed. **Recommendations** As a temporary workaround, consider disabling the performance enhancement features in affected processors to minimize the risk of exploitation. Restrict access to sensitive data and confidential information to prevent potential leaks. Avoid using vulnerable processors for sensitive applications until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 102.5 Thunderbird versions prior to 102.5 Firefox versions prior to 107 **Description** The issue is related to keyboard events and cache-based timing attacks, such as Prime+Probe, which could potentially reveal pressed keys. This is a security error in Mozilla browsers, including Firefox and Thunderbird, that may allow a remote attacker to disclose protected information. **Recommendations** For Firefox ESR versions prior to 102.5, update to version 102.5 or later. For Thunderbird versions prior to 102.5, update to version 102.5 or later. For Firefox versions prior to 107, update to version 107 or later.

**Name of the Vulnerable Software and Affected Versions** AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT) **Description** The issue is related to execution unit scheduler contention, which may lead to a side channel vulnerability. By measuring the contention level on scheduler queues, an attacker may potentially leak sensitive information. This vulnerability, known as SQUIP, affects AMD processors and allows an attacker to determine data used in other processes or virtual machines or establish a hidden communication channel between them, bypassing system access control mechanisms. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intel(R) Processors versions 10 through 12 Intel(R) Processors (affected versions not specified) **Description** The issue is related to improper isolation of shared resources in some Intel(R) Processors, which may allow a privileged user to potentially enable information disclosure via local access. This is caused by an architectural flaw that allows access to uninitialized data left in the Advanced Programmable Interrupt Controller (APIC) registers after previous operations. The problem affects systems using the Software Guard Extensions (SGX) technology. **Recommendations** For Intel(R) Processors versions 10 through 12: Update microcode packages to fix the security vulnerability. For Intel(R) Processors (affected versions not specified): At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 104.0.5112.79 Microsoft Edge (affected versions not specified) **Description** The issue is related to side-channel information leakage in keyboard input, allowing a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. This can be achieved by exploiting the inconsistency in the browser's behavior. **Recommendations** For Google Chrome versions prior to 104.0.5112.79, update to version 104.0.5112.79 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.