Intel Software Guard Extensions vulnerabilities

3 CVEs affecting Intel Software Guard Extensions, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33135, published 2022-05-12.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0157, published 2019-06-13. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access.
• CVE-2021-33135, published 2022-05-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.
• CVE-2018-3689, published 2018-04-03. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote…