CVE-2020-5499

2020-01-0407:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.8%

JSON

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same.

CPENameOperatorVersion
incubator-teaclave-sgx-sdkeq1.0.7
incubator-teaclave-sgx-sdkeq0.2.0
incubator-teaclave-sgx-sdkeq1.0.5
incubator-teaclave-sgx-sdkeq1.0.6
incubator-teaclave-sgx-sdkeq0.9.7
incubator-teaclave-sgx-sdkeq1.0.8
incubator-teaclave-sgx-sdkeqApril-Release
incubator-teaclave-sgx-sdkeq0.9.6
incubator-teaclave-sgx-sdkeq0.9.1
incubator-teaclave-sgx-sdkeq1.0.4

Name	Operator	Version
incubator-teaclave-sgx-sdk	eq	1.0.7
incubator-teaclave-sgx-sdk	eq	0.2.0
incubator-teaclave-sgx-sdk	eq	1.0.5
incubator-teaclave-sgx-sdk	eq	1.0.6
incubator-teaclave-sgx-sdk	eq	0.9.7
incubator-teaclave-sgx-sdk	eq	1.0.8
incubator-teaclave-sgx-sdk	eq	April-Release
incubator-teaclave-sgx-sdk	eq	0.9.6
incubator-teaclave-sgx-sdk	eq	0.9.1
incubator-teaclave-sgx-sdk	eq	1.0.4