CVE-2019-0117
hw: Intel SGX information leak
Severity
ImportantRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · November 13, 2019
Updated · June 27, 2026
Description
A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory.
Statement
Red Hat Product Security is aware of this issue. Updates will be released as they become available. For additional information, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/solutions/2019-microcode-nov
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
As of this time there are no known mitigations. Please install relevant updated packages to address this flaw.
CVSS / CWE
CVSS 3.0 · 6CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CWE-515 · Covert Storage Channel