CVE-2020-0561

EPSS 0.17%
Published 13.02.2020 19:15:13
Last modified 21.11.2024 04:53:45
Source secure@intel.com
Teams watchlist Login
Open Login

Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Software Guard Extensions Sdk Version < 2.6.100.1

Microsoft ≫ Windows Version-

Intel ≫ Software Guard Extensions Sdk Version < 2.8.100.1

Linux ≫ Linux Kernel Version-

Opensuse ≫ Backports Versionsle-15 Updatesp1

Opensuse ≫ Leap Version15.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.17%	0.387

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00009.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00014.html

Third Party Advisory

Mailing List

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00336.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-0561

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-0561

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-0561

EUVD