Skip to content
OpenAdvisories

Vendor

openenclave

3 known vulnerabilities.

Products

openenclave 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-37479

    Improper sanitization of MXCSR and RFLAGS in OpenEnclave

    Open Enclave is a hardware-agnostic open source library for developing applications that utilize Hardware-based Trusted Execution Environments, also known as Enclaves. There are two issues that are mitigated in version 0.19.3. First, Open Enclave SDK does not…

    openenclave openenclave
  • Medium 6.8
    CVE-2020-15224

    Socket syscalls can leak enclave memory contents in Open Enclave

    In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerabilit…

    openenclave openenclave
  • Medium 5.3
    CVE-2020-15107

    x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave

    In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface (ABI) for such operations, a host app can compromise the execution int…

    openenclave openenclave