CVE Database›Document archive›CVE-2019-0117

CVE-2019-0117

hw: Intel SGX information leak

Loading…

Severity

Important

Red Hat Product Security

6

CVSS 3.0

Review impact separately from score.

Published · November 13, 2019

Updated · June 27, 2026

Description

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory.

Statement

Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/2019-microcode-nov

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

As of this time there are no known mitigations. Please install relevant updated packages to address this flaw.

CVSS / CWE

CVSS 3.0 · 6
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-515 · Covert Storage Channel