CVE-2021-0001

Published: Jun 9, 2021Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.

Affected (12)

Products: Intel: Integrated Performance Primitives Cryptography, Sgx Dcap, Sgx Psw, Sgx Sdk

Intel

4 products

Integrated Performance Primitives Cryptography

Sgx Dcap

Sgx Psw

Sgx Sdk

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Intel Integrated Performance Primitives Cryptography	Version 2019
Intel Integrated Performance Primitives Cryptography	Version 2019 update_1
Intel Integrated Performance Primitives Cryptography	Version 2019 update_2
Intel Integrated Performance Primitives Cryptography	Version 2019 update_3
Intel Integrated Performance Primitives Cryptography	Version 2019 update_4
Intel Integrated Performance Primitives Cryptography	Version 2020
Intel Sgx Dcap	Up to 1.10.100.4
Intel Sgx Dcap	Up to 1.10.100.4
Intel Sgx Psw	Up to 2.13.100.4
Intel Sgx Psw	Up to 2.12.100.4
Intel Sgx Sdk	Up to 2.13.100.4
Intel Sgx Sdk	Up to 2.12.100.4

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00477.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00477.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.