CVE-2023-38023

Summary

CVE-2023-38023 is a vulnerability affecting the SCONE Confidential Computing Platform before version 5.8.0, specifically on Intel SGX. This issue stems from a lack of pointer-alignment logic in certain entry functions, including __scone_dispatch. As a result, a local attacker can exploit this vulnerability, named "AEPIC Leak," to gain unauthorized access to sensitive information. Consequently, attackers may be able to bypass the intended security measures, potentially compromising confidential data. This vulnerability underscores the importance of implementing strict pointer alignment checks in secure computing environments to safeguard against unintended data leaks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.