7.8

CVE-2019-14566

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Software Guard Extensions Sdk Version2.3.100.49777
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.3.101.50222
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.4.100.51291
   Microsoft ≫ Windows Version-
Intel ≫ Software Guard Extensions Sdk Version2.2.100.45311
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.3.100.46354
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.4.100.48163
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.5.100.49891
   Linux ≫ Linux Kernel Version-
Intel ≫ Software Guard Extensions Sdk Version2.6.100.51363
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.29
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.