CVEvulnerability

CVE-2019-14565

7.8 HIGH Published 2019-11-14 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2019-11-14
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-665

Description

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Affected configurations

• intel software guard extensions sdk 2.3.100.49777 • intel software guard extensions sdk 2.3.101.50222 • intel software guard extensions sdk 2.4.100.51291 • intel software guard extensions sdk 2.2.100.45311 • intel software guard extensions sdk 2.3.100.46354 • intel software guard extensions sdk 2.4.100.48163 • intel software guard extensions sdk 2.5.100.49891 • intel software guard extensions sdk 2.6.100.51363

Related

Weakness · CWE (1)

  • CWE-665 Improper Initialization weakness

References