GCVE - cpe:2.3:a:scontain:scone:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:scontain:scone:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Scontain (`d7ce387a-5da3-547f-8315-741f323ff319`)
Product	Scone (`d129a02a-1ca3-519d-9de0-f284d4156ada`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-38023`	vulnerable	2026-06-08 06:08:16.717764	Details available An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_dispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak." Published: 2023-12-30T00:00:00.000Z Updated: 2024-11-20T17:42:52.840Z Open on db.gcve.eu Reference links https://sconedocs.github.io/release5.7/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html#inpage-nav-3-2-2 https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/stale-data-read-from-xapic.html https://github.com/openenclave/openenclave/security/advisories/GHSA-v3vm-9h66-wm76	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46487`	vulnerable	2026-06-08 05:50:38.964847	Details available Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis. Published: 2023-12-30T00:00:00.000Z Updated: 2025-04-17T20:07:28.695Z Open on db.gcve.eu Reference links https://sconedocs.github.io/release5.7/ https://jovanbulck.github.io/files/acsac20-fpu.pdf https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html#inpage-nav-3-3 https://nvd.nist.gov/vuln/detail/CVE-2020-15107 https://nvd.nist.gov/vuln/detail/CVE-2020-0561#vulnCurrentDescriptionTitle	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46486`	vulnerable	2026-06-08 05:50:38.964331	Details available A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information. Published: 2023-12-30T00:00:00.000Z Updated: 2024-08-03T14:31:46.372Z Open on db.gcve.eu Reference links https://sconedocs.github.io/release5.7/ https://jovanbulck.github.io/files/ccs19-tale.pdf https://jovanbulck.github.io/files/oakland24-pandora.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Scone

Notes

PURL mappings

Vulnerability references

Contribute