CVE-2018-3626

Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptible to a side channel potentially allowing a local user to access unauthorized information.

Score

CVSS 3.0 4.7 Medium

Status

Modified - secure@intel.com

Published

2018-03-20

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Sgx Sdk (Intel)
• Sgx Sdk (Intel Corporation)

References

• http://www.securityfocus.com/bid/103479
• https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00117&languageid=en-fr