CVE-2019-14565: High severity intel software guard extensions vulnerability

Published Nov 14, 2019
·
Updated

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

Affected Software

10 affected components
Intel Software Guard Extensions Sdk=2.3.100.49777
Intel Software Guard Extensions Sdk=2.3.101.50222
Intel Software Guard Extensions Sdk=2.4.100.51291
Microsoft Windows
Intel Software Guard Extensions Sdk=2.2.100.45311
Intel Software Guard Extensions Sdk=2.3.100.46354
Intel Software Guard Extensions Sdk=2.4.100.48163
Intel Software Guard Extensions Sdk=2.5.100.49891
Intel Software Guard Extensions Sdk=2.6.100.51363
Linux Linux kernel

Event History

Nov 14, 2019
CVE Published
via MITRE·04:47 PM
Data Sourced
via MITRE·04:47 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2019-14565?

CVE-2019-14565 has a high severity rating due to its potential to allow information disclosure, escalation of privilege, or denial of service.

2

How do I fix CVE-2019-14565?

To fix CVE-2019-14565, update the Intel SGX SDK to versions 2.4.100.51292 or later for Windows and 2.6.100.51364 or later for Linux.

3

Who is affected by CVE-2019-14565?

CVE-2019-14565 affects users of Intel SGX SDK versions 2.4.100.51291 and earlier on Windows and versions 2.6.100.51363 and earlier on Linux.

4

Can CVE-2019-14565 be exploited remotely?

CVE-2019-14565 requires local access by an authenticated user to exploit, thus it is not a remote vulnerability.

5

What are the potential impacts of CVE-2019-14565?

The potential impacts of CVE-2019-14565 include unauthorized information disclosure, privilege escalation, and denial of service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203