7.8

CVE-2019-14566

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Software Guard Extensions Sdk Version 2.3.100.49777
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.3.101.50222
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.4.100.51291
   Microsoft ≫ Windows Version -
Intel ≫ Software Guard Extensions Sdk Version 2.2.100.45311
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.3.100.46354
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.4.100.48163
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.5.100.49891
   Linux ≫ Linux Kernel Version -
Intel ≫ Software Guard Extensions Sdk Version 2.6.100.51363
   Linux ≫ Linux Kernel Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.271
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
Vendor Advisory