Yüksek CVSS 7.8
CVE-2019-14566: Software Guard Extensions Sdk: hatalı girdi doğrulama
Açıklama (NVD)
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Özet bilgiler
- Ürün
- Intel Software Guard Extensions Sdk
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,36 (yüzdelik 29)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| intel-software-guard-extensions-sdk | 2.3.100.49777 | 2.3.100.49777 | — |
| intel-software-guard-extensions-sdk | 2.3.101.50222 | 2.3.101.50222 | — |
| intel-software-guard-extensions-sdk | 2.4.100.51291 | 2.4.100.51291 | — |
| intel-software-guard-extensions-sdk | 2.2.100.45311 | 2.2.100.45311 | — |
| intel-software-guard-extensions-sdk | 2.3.100.46354 | 2.3.100.46354 | — |
| intel-software-guard-extensions-sdk | 2.4.100.48163 | 2.4.100.48163 | — |
| intel-software-guard-extensions-sdk | 2.5.100.49891 | 2.5.100.49891 | — |
| intel-software-guard-extensions-sdk | 2.6.100.51363 | 2.6.100.51363 | — |