Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2019-0117

Published: Nov 14, 2019 | Modified: Nov 21, 2024
CVSS 3.x
4.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
6 IMPORTANT
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Ubuntu
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-0117
CWEhttps://cwe.mitre.org/data/definitions/.html

Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families; Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.

Affected Software

NameVendorStart VersionEnd Version
Core_i7-6970hq_firmwareIntel- (including)- (including)
Red Hat Enterprise Linux 6RedHatmicrocode_ctl-2:1.17-33.19.el6_10*
Red Hat Enterprise Linux 6.5 Advanced Update SupportRedHatmicrocode_ctl-2:1.17-17.25.el6_5*
Red Hat Enterprise Linux 6.6 Advanced Update SupportRedHatmicrocode_ctl-2:1.17-19.23.el6_6*
Red Hat Enterprise Linux 7RedHatmicrocode_ctl-2:2.1-53.3.el7_7*
Red Hat Enterprise Linux 7.2 Advanced Update SupportRedHatmicrocode_ctl-2:2.1-12.24.el7_2*
Red Hat Enterprise Linux 7.2 Telco Extended Update SupportRedHatmicrocode_ctl-2:2.1-12.24.el7_2*
Red Hat Enterprise Linux 7.2 Update Services for SAP SolutionsRedHatmicrocode_ctl-2:2.1-12.24.el7_2*
Red Hat Enterprise Linux 7.3 Advanced Update SupportRedHatmicrocode_ctl-2:2.1-16.27.el7_3*
Red Hat Enterprise Linux 7.3 Telco Extended Update SupportRedHatmicrocode_ctl-2:2.1-16.27.el7_3*
Red Hat Enterprise Linux 7.3 Update Services for SAP SolutionsRedHatmicrocode_ctl-2:2.1-16.27.el7_3*
Red Hat Enterprise Linux 7.4 Advanced Update SupportRedHatmicrocode_ctl-2:2.1-22.26.el7_4*
Red Hat Enterprise Linux 7.4 Telco Extended Update SupportRedHatmicrocode_ctl-2:2.1-22.26.el7_4*
Red Hat Enterprise Linux 7.4 Update Services for SAP SolutionsRedHatmicrocode_ctl-2:2.1-22.26.el7_4*
Red Hat Enterprise Linux 7.5 Extended Update SupportRedHatmicrocode_ctl-2:2.1-29.24.el7_5*
Red Hat Enterprise Linux 7.6 Extended Update SupportRedHatmicrocode_ctl-2:2.1-47.8.el7_6*
Red Hat Enterprise Linux 8RedHatmicrocode_ctl-4:20190618-1.20191112.1.el8_1*
Red Hat Enterprise Linux 8.0 Update Services for SAP SolutionsRedHatmicrocode_ctl-4:20180807a-2.20191112.1.el8_0*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use