CVE-2019-14566
published 2019-11-14CVE-2019-14566: Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure…
PriorityP434high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.36%
28.0th percentile
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intel | 2019.2_ipu_intel_sgx | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
| intel | software_guard_extensions_sdk | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Intel SGX SDK on Windows/Linux input validation (K57201259)
vuldb·2026-10-11·CVSS 7.8
CVE-2019-14566 [HIGH] Intel SGX SDK on Windows/Linux input validation (K57201259)
A vulnerability classified as critical has been found in Intel SGX SDK on Windows/Linux. This impacts an unknown function. This manipulation causes improper input validation.
This vulnerability is tracked as CVE-2019-14566. The attack is restricted to local execution. No exploit exists.
GHSA
GHSA-77jw-45f6-38qv: Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure
ghsa_unreviewed·2022-05-24
CVE-2019-14566 [HIGH] CWE-20 GHSA-77jw-45f6-38qv: Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure
Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://support.f5.com/csp/article/K57201259?utm_source=f5support&%3Butm_medium=RSShttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.htmlhttps://support.f5.com/csp/article/K57201259?utm_source=f5support&%3Butm_medium=RSShttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html
2019-11-14
Published