PT-2022-2970 · Intel+10 · Intel Processors+13

Published 2022-06-14 · Updated 2023-03-03 · CVE-2022-21166

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue is related to incomplete cleanup in specific special register write operations, which may allow an authenticated user to potentially enable information disclosure via local access. Additionally, there is a buffer overflow issue in the Intel Software Guard Extensions SDK, Intel SGX DCAP, and SGX PSW, which can be exploited to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-459

Related Identifiers

ALSA-2022:6437

ALSA-2022:6460

ALSA-2022:7933

ALSA-2022:8267

ALT-PU-2022-2071

ALT-PU-2022-2278

BDU:2022-03600

CESA-2022_5937

CESA-2022_6437

CESA-2022_6460

CVE-2022-21166

DLA-3065-1

DSA-5173-1

DSA-5178-1

DSA-5184-1

MGASA-2022-0242

MGASA-2022-0243

OESA-2022-1750

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2078-1

OPENSUSE-SU-2022_2079-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2597-1

OPENSUSE-SU-2022_2599-1

OPENSUSE-SU-2022_2615-1

RHSA-2022:5937

RHSA-2022:5939

RHSA-2022:6437

RHSA-2022:6460

RHSA-2022:6872

RHSA-2022:6983

RHSA-2022:6991

RHSA-2022:7279

RHSA-2022:7280

RHSA-2022:7933

RHSA-2022:8267

RHSA-2022:8973

RHSA-2022:8974

RHSA-2022_5937

RHSA-2022_5939

RHSA-2022_6437

RHSA-2022_6460

RHSA-2022_7933

RHSA-2022_8267

RLSA-2022:6437

RLSA-2022:6460

SUSE-SU-2022:2077-1

SUSE-SU-2022:2078-1

SUSE-SU-2022:2079-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2083-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2520-1

SUSE-SU-2022:2557-1

SUSE-SU-2022:2560-1

SUSE-SU-2022:2569-1

SUSE-SU-2022:2574-1

SUSE-SU-2022:2591-1

SUSE-SU-2022:2597-1

SUSE-SU-2022:2599-1

SUSE-SU-2022:2599-2

SUSE-SU-2022:2600-1

SUSE-SU-2022:2601-1

SUSE-SU-2022:2615-1

SUSE-SU-2022:2629-1

SUSE-SU-2023:0416-1

USN-5484-1

USN-5485-1

USN-5485-2

USN-5486-1

USN-5505-1

USN-5513-1

USN-5529-1

USN-5535-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Intel Processors

Intel Sgx Dcap

Intel Software Guard Extensions Sdk

Linuxmint

Red Hat

Rocky Linux

Sgx Psw

Suse

Ubuntu

Windows

References · 789

• https://osv.dev/vulnerability/SUSE-SU-2022:2078-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2601-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:6437 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21125 · Security Note
• https://ubuntu.com/security/CVE-2022-1679 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9481.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4P2KJYL74KGLHE4JZETVW7PZH6ZIABA · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-33120 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2599-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5505-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-0146 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1652 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8267 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5486-1 · Vendor Advisory