Improper Initialization in Intel SGX SDK for Windows and Intel SGX SDK for Linux - CVE-2020-0561

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU25191

Improper Initialization in Intel SGX SDK for Windows and Intel SGX SDK for Linux - CVE-2020-0561

Published: February 11, 2020


Vulnerability identifier: #VU25191
CSH Severity: Low
CVSS v4: 7.3 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-0561
CWE-ID: CWE-665
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper initialization in the Intel(R) SGX SDK. A local user can run a specially crafted application to execute arbitrary code on the system with elevated privileges.


Affected software

Intel SGX SDK for Windows
Intel SGX SDK for Linux
SUSE Linux
Opensuse

How to mitigate CVE-2020-0561

Install updates from vendor's website.

Intel SGX SDK for Windows - update to 2.6.100.1
Intel SGX SDK for Linux - update to 2.6.100.1

External References

Related Security Bulletins