CVE-2022-46487
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 0.6%
Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aReferências
https://jovanbulck.github.io/files/acsac20-fpu.pdfhttps://jovanbulck.github.io/files/oakland24-pandora.pdfhttps://nvd.nist.gov/vuln/detail/CVE-2020-0561#vulnCurrentDescriptionTitlehttps://nvd.nist.gov/vuln/detail/CVE-2020-15107https://sconedocs.github.io/release5.7/https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html#inpage-nav-3-3