CVE-2021-44421

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access…

published March 6, 2022

CVSS
—
EPSS
0%
Percentile
36.8
In the wild
Unconfirmed
What it is

The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00436 · 36.8th percentile
Published
2022-03-06T20:03Z
EPSS history
Timeline
  • 06 MAR 20:03Z
    The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access…
    cvelistv5