Allele Security Alert
ASA-2019-00141
Identifier(s)
ASA-2019-00141, CVE-2019-0122, INTEL-SA-00217
Title
Double-free in Intel SGX SDK
Vendor(s)
Intel
Product(s)
Intel SGX SDK for Windows
Intel SGX SDK for Linux
Affected version(s)
Intel SGX SDK for Windows before version 2.1
Intel SGX SDK for Linux before version 2.2
Fixed version(s)
Intel SGX SDK for Windows version 2.1 or later
Intel SGX SDK for Linux version 2.2 or later
Proof of concept
Unknown
Description
Double-free vulnerability in Intel SGX SDK for Linux before version 2.2 and Intel SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
Technical details
Unknown
Credits
Intel
Reference(s)
Security Center
https://www.intel.com/content/www/us/en/security-center/default.html
INTEL-SA-00217
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00217.html
CVE-2019-0122
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0122
CVE-2019-0122
https://nvd.nist.gov/vuln/detail/CVE-2019-0122
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: March 17, 2019