Improper input validation in Intel 2019.2 Ipu – Intel(r) Sgx
CVE-2019-14566
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.004 (28.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel 2019.2 Ipu – Intel(r) Sgx — versions See provided reference
- Intel Software_guard_extensions_sdk — versions 2.3.100.49777, 2.3.101.50222, 2.4.100.51291
- Linux Linux_kernel
- Microsoft Windows
Weakness classification (CWE)
References
- secure@intel.com (x_refsource_MISC, Vendor Advisory)
- secure@intel.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-14566?
- CVE-2019-14566 is a high-severity vulnerability in Intel 2019.2 Ipu – Intel(r) Sgx, classified under Improper Input Validation. CVSS score: 7.8/10. Published 2019-11-14.
- How severe is CVE-2019-14566?
- High severity. CVSS v3 base score is 7.8 out of 10.