Latest intel sgx sdk Vulnerabilities

● CVE-2022-26841

Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access...

Intel Sgx Sdk<2.16.100.1

Linux Linux kernel

Intel Sgx Sdk<2.15.100.1

Microsoft Windows

● CVE-2022-26509

Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.

Intel Sgx Sdk<2.16.100.1

Linux Linux kernel

Intel Sgx Sdk<2.15.100.1

Microsoft Windows

● CVE-2022-27499

Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.

Intel Sgx Sdk<2.17.100.1

Intel Sgx Sdk<2.18.100.1

● CVE-2022-21127

Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

ubuntu/intel-microcode<3.20220510.1

ubuntu/intel-microcode<3.20220510.0ubuntu0.18.04.1

ubuntu/intel-microcode<3.20220510.0ubuntu0.20.04.1

ubuntu/intel-microcode<3.20220510.0ubuntu0.21.10.1

ubuntu/intel-microcode<3.20220510.0ubuntu0.22.04.1

ubuntu/intel-microcode<3.20220510.0ubuntu1

and 19 more

● CVE-2022-21166

Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

redhat/kernel-rt<0:3.10.0-1160.76.1.rt56.1220.el7

redhat/kernel<0:3.10.0-1160.76.1.el7

redhat/kernel-rt<0:4.18.0-372.26.1.rt7.183.el8_6

redhat/kernel<0:4.18.0-372.26.1.el8_6

redhat/kernel<0:4.18.0-147.76.1.el8_1

redhat/kernel<0:4.18.0-193.93.1.el8_2

and 174 more

● CVE-2022-21125

Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

redhat/kernel-rt<0:3.10.0-1160.76.1.rt56.1220.el7

redhat/kernel<0:3.10.0-1160.76.1.el7

redhat/kernel-rt<0:4.18.0-372.26.1.rt7.183.el8_6

redhat/kernel<0:4.18.0-372.26.1.el8_6

redhat/kernel<0:4.18.0-147.76.1.el8_1

redhat/kernel<0:4.18.0-193.93.1.el8_2

and 174 more

● CVE-2022-21123

Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

redhat/kernel-rt<0:3.10.0-1160.76.1.rt56.1220.el7

redhat/kernel<0:3.10.0-1160.76.1.el7

redhat/kernel-rt<0:4.18.0-372.26.1.rt7.183.el8_6

redhat/kernel<0:4.18.0-372.26.1.el8_6

redhat/kernel<0:4.18.0-147.76.1.el8_1

redhat/kernel<0:4.18.0-193.93.1.el8_2

and 174 more

● CVE-2021-0186

Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.

Intel Sgx Sdk<=2.12

Intel Sgx Sdk<=2.13

Intel Xeon Gold 6342 Firmware

Intel Xeon Gold 6342

Intel Xeon Gold 6346 Firmware

Intel Xeon Gold 6346

and 360 more

● CVE-2021-0001

Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.

Intel Integrated Performance Primitives Cryptography=2019

Intel Integrated Performance Primitives Cryptography=2019-update_1

Intel Integrated Performance Primitives Cryptography=2019-update_2

Intel Integrated Performance Primitives Cryptography=2019-update_3

Intel Integrated Performance Primitives Cryptography=2019-update_4

Intel Integrated Performance Primitives Cryptography=2020

and 6 more

● CVE-2018-18098

Improper file verification in install routine for Intel(R) SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access.

Intel Sgx Platform Software<2.2.100

Microsoft Windows

Intel Sgx Sdk<2.2.100

Latest intel sgx sdk Vulnerabilities

Company

Resources

Contact