7.8

CVE-2019-14565

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Software Guard Extensions Sdk Version2.3.100.49777
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.3.101.50222
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.4.100.51291
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.2.100.45311
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.3.100.46354
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.4.100.48163
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.5.100.49891
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.6.100.51363
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.29
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.