Unscored CVE-2022-46486 EUVD-2022-49290GHSA-hmpw-7rwx-q968

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensit…

Published Dec 30, 2023 · Updated Aug 3, 2024 · Assigned by mitre

Description

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.

References

https://sconedocs.github.io/release5.7/
https://jovanbulck.github.io/files/ccs19-tale.pdf
https://jovanbulck.github.io/files/oakland24-pandora.pdf