CVE-2019-14566CWE-20

CVE-2019-14566

High · published November 14, 2019

CVSS v3.1
7.8
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 27.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2019-11-14T22:15Z
Affected products (8)
ProductVersionsFixed in
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
intel/software_guard_extensions_sdkall versions—
References (4)
https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html · [email protected]https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS · af854a3a-2127-422b-91ae-364da2661108https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 NOV 16:46Z
    Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure…
    cvelistv5