CVE-2020-0561 Privilege escalation in Intel(R) SGX SDK
An authenticated local attacker can escalate privileges due to improper initialization in the Intel SGX SDK.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-0561?
CVE-2020-0561 is a high-severity vulnerability in Opensuse Backports, published on 13 Feb 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness: CWE-665
Which versions are affected by CVE-2020-0561?
It affects 3 products.
Products include Intel Software Guard Extensions Sdk, Opensuse Backports, Opensuse Leap.
How do I fix CVE-2020-0561?
Upgrade to a fixed version.
Is CVE-2020-0561 being exploited?
There is no known exploitation of CVE-2020-0561 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Backports
Sources
Also known as GHSA-r4p7-pmgm-2v37.