CVE-2020-15107

x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave

Medium · published July 15, 2020

CVSS v3.1
5.3
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface (ABI) for such operations, a host app can compromise the execution integrity of some x87 FPU operations in an enclave. Depending on the FPU control configuration of the enclave app and whether the operations are used in secret-dependent execution paths, this vulnerability may also be used to mount a side-channel attack on the enclave. This has been fixed in 0.10.0 and the current master branch. Users will need to recompile their applications against the patched libraries to be protected from this vulnerability.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Published
2020-07-15T21:21Z
EPSS history
Timeline
  • 15 JUL 21:21Z
    x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave
    cvelistv5