CVEvulnerability

CVE-2019-14566

7.8 HIGH Published 2019-11-14 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2019-11-14
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Affected configurations

• intel software guard extensions sdk 2.3.100.49777 • intel software guard extensions sdk 2.3.101.50222 • intel software guard extensions sdk 2.4.100.51291 • intel software guard extensions sdk 2.2.100.45311 • intel software guard extensions sdk 2.3.100.46354 • intel software guard extensions sdk 2.4.100.48163 • intel software guard extensions sdk 2.5.100.49891 • intel software guard extensions sdk 2.6.100.51363

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References