← Back

CVE-2018-3626

nvd nist
Published: Mar 20, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.7
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.0 / Impact: 3.6
Source: NVD

Description

Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.

Affected (2)

Products: Intel: Sgx Sdk
Intel
1 product
Sgx Sdk
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sgx Sdk
Before 1.9.6
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Sgx Sdk
Before 2.1.2
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: secure@intel.com
Third Party AdvisoryVDB Entry
Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.