PT-2020-4001 · Intel+1 · Intel Sgx Sdk+1

Publicado 2020-02-11 · Atualizado 2024-06-15 · CVE-2020-0561

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

**Nome do software vulnerável e versões afetadas:

Versões do Intel(R) SGX SDK anteriores à 2.6.100.1

Descrição:

O problema está relacionado a uma inicialização incorreta no Intel(R) SGX SDK, o que pode permitir que um usuário autenticado potencialmente habilite a escalada de privilégios por meio de acesso local. Isso poderia permitir que um invasor elevasse seus privilégios.

Recomendações:

Para versões anteriores à 2.6.100.1, atualize para a versão 2.6.100.1 ou posterior para resolver o problema.

Correção

Improper Initialization

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

BDU:2020-04398

CVE-2020-0561

OPENSUSE-SU-2020:0604-1

OPENSUSE-SU-2020:0615-1

OPENSUSE-SU-2020_0604-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

Produtos afetados

Intel Sgx Sdk

Suse

Referências · 2323

• https://suse.com/security/cve/CVE-2022-0463 · Nota
• https://suse.com/security/cve/CVE-2021-30517 · Nota
• https://suse.com/security/cve/CVE-2022-2605 · Nota
• https://suse.com/security/cve/CVE-2022-3071 · Nota
• https://suse.com/security/cve/CVE-2015-1216 · Nota
• https://suse.com/security/cve/CVE-2016-5131 · Nota
• https://suse.com/security/cve/CVE-2017-5075 · Nota
• https://suse.com/security/cve/CVE-2021-4101 · Nota
• https://suse.com/security/cve/CVE-2021-21225 · Nota
• https://suse.com/security/cve/CVE-2022-1314 · Nota
• https://suse.com/security/cve/CVE-2012-5148 · Nota
• https://suse.com/security/cve/CVE-2021-21113 · Nota
• https://suse.com/security/cve/CVE-2019-19926 · Nota
• https://suse.com/security/cve/CVE-2019-13702 · Nota
• https://suse.com/security/cve/CVE-2021-21208 · Nota