Allele Security Alert
ASA-2019-00345
Identifier(s)
ASA-2019-00345, CVE-2019-0177, INTEL-SA-00248
Title
Insufficient input validation in the attestation process
Vendor(s)
Intel
Product(s)
Intel Open Cloud Integrity Technology (Open CIT)
Affected version(s)
All versions of Intel Open Cloud Integrity Technology (Open CIT)
Fixed version(s)
Intel recommends users of Open Cloud Integrity Technology (Open CIT) discontinue use and move to Intel® Security Libraries for Data Center (Intel® SecL-DC).
Proof of concept
Unknown
Description
Insufficient input validation in the attestation process for Open Cloud Integrity Technology (Open CIT) may allow an authenticated user to potentially enable escalation of privilege via local access.
Technical details
Unknown
Credits
Unknown
Reference(s)
Open Cloud Integrity Technology and OpenAttestation Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00248.html
Intel® Security Libraries for Data Center (Intel® SecL-DC)
https://01.org/intel-secl
CVE-2019-0177
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0177
CVE-2019-0177
https://nvd.nist.gov/vuln/detail/CVE-2019-0177
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 13, 2019