The vulnerability relates to the set of development tools called Intel Software Guard Extensions SDK, as well as microsoftware such as Intel SGX DCAP and SGX PSW. This vulnerability stems from operations that involve writing to memory beyond the buffer boundaries, allowing attackers to disclose sensitive information.

Memory boundary write vulnerability in Intel Software Guard Extensions SDK enables disclosure of data.

Reporter	Title	Published	Views	Family All 500
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities	13 Feb 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Intel Processors affect IBM Cloud Pak System	31 Mar 202315:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway potentially affected by CPU side-channel (CVE-2022-21166)	16 Dec 202218:59	–	ibm
IBM Security Bulletins	Security Bulletin: For IBM Cloudpak for Watson AIOPS 3.5.1	26 Mar 202502:34	–	ibm
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2022-1813 (ALAS-2022-1813)	15 Jul 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-015 (ALASKERNEL-5.10-2022-015)	21 Jul 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-002 (ALASKERNEL-5.15-2022-002)	21 Jul 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-028 (ALASKERNEL-5.4-2022-028)	21 Jul 202200:00	–	nessus

Vulners

Node

intel intel_sgx_dcapRange<1.14.100.3linux

linux xenRange≤4.14.5linux

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html
linuxkernelcves	www.linuxkernelcves.com/cves/CVE-2022-21166
xenbits	www.xenbits.xen.org/xsa/advisory-404.html
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/
web	www.web.nvd.nist.gov/view/vuln/detail

15 Feb 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.6

CVSS 35.5

EPSS0.05778