2019.2 IPU – Intel® SGX with Intel® Processor Graphics Update Advisory

Summary: A potential security vulnerability in Intel® Software Guard Extensions SGX enabled processors with Intel® Processor Graphics may allow information disclosure. Intel is releasing software and firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...

Updated microcode packages fix security vulnerabilities

This update provides the Intel 20191112 microcode release that adds the microcode side fixes and mitigations for at least the following security issues: A flaw was found in the implementation of SGX around the access control of protected memory. A local attacker of a system with SGX enabled and a...

MGASA-2019-0334 Updated microcode packages fix security vulnerabilities

This update provides the Intel 20191112 microcode release that adds the microcode side fixes and mitigations for at least the following security issues: A flaw was found in the implementation of SGX around the access control of protected memory. A local attacker of a system with SGX enabled and a...

CVE-2019-0117

Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5, v6 Families; IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics may allow a privileged user t...

Improper access control

Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5, v6 Families; IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics may allow a privileged user t...

Design/Logic Flaw

Insufficient memory protection in IntelR 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0117

Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5, v6 Families; IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics may allow a privileged user t...

CVE-2019-0117

CVE-2019-0117 involves insufficient access control in the protected memory subsystem of Intel SGX across 6th–9th Gen Intel Core and certain Xeon families with Intel Processor Graphics, potentially enabling a privileged user to disclose information via local access. The vulnerability is described ...

CVE-2019-0123

CVE-2019-0123 concerns Intel 6th Generation Core Processors (and newer) with SGX/TXT. The root cause is insufficient memory protection in protected memory, which could let a local unprivileged or privileged user escalate privileges. The vulnerability is described in multiple connected documents, ...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14565

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

Information disclosure

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

Input validation

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14565

Affected software: Intel SGX SDK (Windows) up to 2.4.100.51291 and (Linux) up to 2.6.100.51363. Vulnerability: CVE-2019-14565 due to insufficient initialization in SGX SDK components, enabling information disclosure, privilege escalation, or denial of service via local access when authenticated. ...

CVE-2019-14565

Insufficient initialization in IntelR SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14566

Insufficient input validation in IntelR SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access...

CVE-2019-14566

CVE-2019-14566 affects Intel SGX SDK across multiple Linux and Windows builds due to insufficient input validation in the SDK. Affected components are Intel SGX SDK for Windows (versions up to 2.4.100.51291 and older) and Linux (up to 2.6.100.51363 and older). The vulnerability may allow an authe...

[ASA-201911-14] intel-ucode: multiple issues

Arch Linux Security Advisory ASA-201911-14 ========================================== Severity: High Date : 2019-11-13 CVE-ID : CVE-2019-0117 CVE-2019-11135 CVE-2019-11139 Package : intel-ucode Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-1068 Summary ======= The...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...