{"id":"CVE-2019-14566","state":"PUBLISHED","title":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or d","description":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.","publishedAt":"2019-11-14T16:46:00.000Z","updatedAt":"2026-10-08T21:03:16.028Z","severity":null,"assigner":"intel","products":["Intel 2019.2 IPU – Intel(R) SGX"],"affected":[{"vendor":"Intel","product":"2019.2 IPU – Intel(R) SGX","versions":[{"version":"See provided reference","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:30.451Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/14xxx/CVE-2019-14566.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2019-14566","state":"PUBLISHED","datePublished":"2019-11-14T16:46:00.000Z","dateUpdated":"2026-10-08T21:03:16.028Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2019-08-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access."}],"affected":[{"vendor":"Intel","product":"2019.2 IPU – Intel(R) SGX","versions":[{"version":"See provided reference","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","tags":["x_refsource_MISC"]},{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Escalation of Privilege, Denial of Service, Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"intel","dateUpdated":"2019-11-19T07:06:57.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","ID":"CVE-2019-14566","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"2019.2 IPU – Intel(R) SGX","version":{"version_data":[{"version_value":"See provided reference"}]}}]},"vendor_name":"Intel"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Escalation of Privilege, Denial of Service, Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","refsource":"MISC","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html"},{"name":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp;utm_medium=RSS","refsource":"CONFIRM","url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp;utm_medium=RSS"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00293.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.f5.com/csp/article/K57201259?utm_source=f5support&amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:19:41.316Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2019-14566","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-08T20:56:01.544123Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-08T21:03:16.028Z"}}]}}}