Security Advisory

CVE-2021-44421

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-06 20:03:40
Last updated 2024-08-04 04:25:15
Assigner mitre
State PUBLISHED

Description

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis.