What is CVE-2019-14565?

CVE-2019-14565 is a high-severity vulnerability in Intel 2019.2 Ipu – Intel(r) Sgx, classified under Improper Initialization. CVSS score: 7.8/10. Published 2019-11-14.

How severe is CVE-2019-14565?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Intel 2019.2 Ipu – Intel(r) Sgx

CVE-2019-14565

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Vulnerability class: Dirty Pipe (CVE-2022-0847)

EPSS: 0.004 (28.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel 2019.2 Ipu – Intel(r) Sgx — versions See provided reference
Intel Software_guard_extensions_sdk — versions 2.3.100.49777, 2.3.101.50222, 2.4.100.51291
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-665 — Improper Initialization

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)
secure@intel.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-14565?: CVE-2019-14565 is a high-severity vulnerability in Intel 2019.2 Ipu – Intel(r) Sgx, classified under Improper Initialization. CVSS score: 7.8/10. Published 2019-11-14.
How severe is CVE-2019-14565?: High severity. CVSS v3 base score is 7.8 out of 10.