CVE-2019-14565CWE-665

CVE-2019-14565

High · published November 14, 2019

CVSS v3.1
7.8
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 27.9th percentile
Weakness
CWE-665 · Improper Initialization
Published
2019-11-14T22:15Z
Affected products (8)
ProductVersionsFixed in
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
References (4)
https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html · [email protected]https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 NOV 16:47Z
    Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an…
    cvelistv5