Intel SGX SDK: Insufficient input validation in the SGX SDK's generated edge routines, letting a local user

CVE-2019-14566Firmware, BMC & network fabriccurated

Impact

Insufficient input validation in the SGX SDK's generated edge routines, letting a local user reach information disclosure, privilege escalation, or denial of service against an enclave built with the affected SDK.

Who can reach it

Local authenticated user calling into a vulnerable enclave.

What to do

Rebuild and re-sign enclaves with a fixed SDK, then re-attest. Vendor-side fix; no operator reboot.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-14566 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.