Allele Security Alert
ASA-2019-00344
Identifier(s)
ASA-2019-00344, CVE-2019-0178, INTEL-SA-00248
Title
A race condition in the agent service
Vendor(s)
Intel
Product(s)
Intel Open Cloud Integrity Technology (Open CIT)
Affected version(s)
All versions of Intel Open Cloud Integrity Technology (Open CIT)
Fixed version(s)
Intel recommends users of Open Cloud Integrity Technology (Open CIT) discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).
Proof of concept
Unknown
Description
A race condition in the agent service for Open Cloud Integrity Technology (Open CIT) may allow an authenticated user to potentially enable escalation of privilege via local access.
Technical details
Unknown
Credits
Unknown
Reference(s)
Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl
CVE-2019-0178
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0178
CVE-2019-0178
https://nvd.nist.gov/vuln/detail/CVE-2019-0178
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 13, 2019