Intel SGX SDK (Edger8r generated code, side channel): Edger8r generated bridge code that was susceptible to a side

CVE-2018-3626Firmware, BMC & network fabriccurated

Impact

Edger8r generated bridge code that was susceptible to a side channel, so a local user could recover information crossing the enclave boundary. Earliest member of the generated-bridge-code family.

Who can reach it

Local user interacting with a vulnerable enclave.

What to do

Rebuild enclaves with SGX SDK 2.1.2 (Linux) / 1.9.6 (Windows) or later and re-attest.

References

https://nvd.nist.gov/vuln/detail/CVE-2018-3626 https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.