7.8

CVE-2019-14565

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Software Guard Extensions Sdk Version 2.3.100.49777
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.3.101.50222
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.4.100.51291
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.2.100.45311
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.3.100.46354
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.4.100.48163
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.5.100.49891
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.6.100.51363
   Linux ≫ Linux Kernel Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.271
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
Vendor Advisory