PT-2019-4271 · Intel · Intel Software Guard Extensions Sdk

Publicado 2019-11-12 · Atualizado 2020-08-24 · CVE-2019-14565

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Software Guard Extensions SDK versions 2.4.100.51291 and earlier Intel Software Guard Extensions SDK Linux versions 2.6.100.51363 and earlier

Description The issue is related to insufficient input validation, which may allow an attacker to elevate privileges, cause a denial of service, or gain unauthorized access to protected information. An authenticated user may enable information disclosure, escalation of privilege, or denial of service via local access.

Recommendations For Intel Software Guard Extensions SDK versions 2.4.100.51291 and earlier, update to a version later than 2.4.100.51291 to resolve the issue. For Intel Software Guard Extensions SDK Linux versions 2.6.100.51363 and earlier, update to a version later than 2.6.100.51363 to resolve the issue.

Correção

Improper Initialization

RCE

Enumeração de Fraquezas

CWE-665

CWE-20

Identificadores relacionados

BDU:2019-04878

CVE-2019-14565

Produtos afetados

Intel Software Guard Extensions Sdk

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-0140 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-14565 · Aviso do Fabricante
• https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-14565 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04878 · Nota de Segurança
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00255.html · Nota