CVE-2023-38023 : Security Advisory and Response

A security issue has been identified in the SCONE Confidential Computing Platform, impacting Intel SGX devices. This vulnerability, known as an 'AEPIC Leak,' allows a local attacker to access unauthorized information through a lack of pointer-alignment logic.

Understanding CVE-2023-38023

This section provides an overview of the CVE-2023-38023 vulnerability, its impact, technical details, and mitigation strategies.

What is CVE-2023-38023?

The CVE-2023-38023 vulnerability exists in SCONE Confidential Computing Platform versions before 5.8.0 for Intel SGX. Attackers can exploit the lack of pointer-alignment logic in certain entry functions to gain unauthorized access to sensitive data.

The Impact of CVE-2023-38023

The 'AEPIC Leak' vulnerability poses a significant risk to the confidentiality of data on affected Intel SGX devices. It enables local attackers to bypass security mechanisms and retrieve sensitive information, potentially leading to data breaches and unauthorized access.

Technical Details of CVE-2023-38023

This section delves into the specific technical aspects of the CVE-2023-38023 vulnerability.

Vulnerability Description

The lack of pointer-alignment logic in __scone_dispatch and other entry functions within the SCONE platform allows attackers to craft malicious inputs that exploit this flaw, resulting in unauthorized information disclosure.

Affected Systems and Versions

All versions of the SCONE Confidential Computing Platform before 5.8.0 for Intel SGX are vulnerable to CVE-2023-38023. Users of these versions are at risk of exploitation by local attackers seeking to perform 'AEPIC Leak' attacks.

Exploitation Mechanism

Attackers can exploit the vulnerability by sending specially crafted inputs to the affected entry functions within the SCONE platform. This manipulation leverages the lack of pointer-alignment logic to access sensitive data without authorization.

Mitigation and Prevention

To address the CVE-2023-38023 vulnerability and protect systems from potential exploitation, users and administrators are advised to implement the following mitigation strategies.

Immediate Steps to Take

Update to SCONE Confidential Computing Platform version 5.8.0 or later, where the vulnerability has been remediated.
Consider restricting access to vulnerable systems and deploying additional security measures to prevent unauthorized access.

Long-Term Security Practices

Regularly monitor for security updates and patches from SCONE and Intel to stay protected against emerging vulnerabilities.
Conduct security assessments and audits to evaluate the integrity of Intel SGX devices and associated software.

Patching and Updates

Stay informed about security advisories and releases from SCONE, Intel, and other relevant vendors to promptly apply patches and updates that address security vulnerabilities.