What is CVE-2019-0122?

CVE-2019-0122 is a high-severity vulnerability in Intel Software Guard Extensions Sdk, classified under Double Free. CVSS score: 7.1/10. Published 2019-03-14.

How severe is CVE-2019-0122?

High severity. CVSS v3 base score is 7.1 out of 10.

Double Free in Intel Software Guard Extensions Sdk

CVE-2019-0122

Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.

Vulnerability class: Double Free

EPSS: 0.003 (27.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

Intel Software_guard_extensions_sdk
Intel Corporation Intel(r) Software Guard Extensions Sdk — versions Multiple versions.
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-415 — Double Free

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0122?: CVE-2019-0122 is a high-severity vulnerability in Intel Software Guard Extensions Sdk, classified under Double Free. CVSS score: 7.1/10. Published 2019-03-14.
How severe is CVE-2019-0122?: High severity. CVSS v3 base score is 7.1 out of 10.