Vulnerabilities

TI-2024-19734 CVE-2024-29971 · GHSA-x5wr-hg6v-9cj3

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

MEDIUM 49

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2025-01-10 No fix listed

TI-2023-19448 CVE-2023-38023 · GHSA-cv25-rx3c-9hpp

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel…

LOW 24

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00221 Published 2023-12-30 No fix listed

TI-2022-22972 CVE-2022-46487 · GHSA-p2fm-m9qc-j6x3

Improper initialization of x87 and SSE floating-point configuration registers in the…

HIGH 67

Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-p…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00596 Published 2023-12-30 No fix listed CWE-665

TI-2022-22971 CVE-2022-46486 · GHSA-hmpw-7rwx-q968

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before…

LOW 25

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00335 Published 2023-12-30 No fix listed CWE-763

Vulnerabilities

Filters

Scontain SCONE 5.8.0 has an interface vulnerability that leads to state corruption via injected signals.

An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel…

Improper initialization of x87 and SSE floating-point configuration registers in the…

A lack of pointer-validation logic in the __scone_dispatch component of SCONE before…