Rewterz
Rewterz Threat Advisory – CVE-2022-0005 – Intel Software Guard Extensions (SGX) Platform Vulnerability
May 16, 2022
Rewterz
Rewterz Threat Advisory – CVE-2022-21151 – Intel Processors Vulnerability
May 16, 2022

Rewterz Threat Advisory – Multiple Intel Xeon Processors Vulnerabilities

Severity

Low

Analysis Summary

CVE-2022-21136 CVSS:3.3

Intel Xeon Processors are vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2022-21131 CVSS:3.3

Intel Xeon Processors could allow a local authenticated attacker to obtain sensitive information, caused by improper access control. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

  • Denial of Service
  • Information Disclosure

Indicators Of Compromise

CVE

CVE-2022-21136

CVE-2022-21131

Affected Vendors

Intel

Affected Products

  • Intel Xeon Scalable Processor Intel 2nd Generation Intel Xeon Scalable Processors
  • Intel Xeon D-2100 Processor
  • Intel Core i9; 79xxX; 78xxX
  • Intel Xeon Scalable Processor
  • Intel 2nd Generation Intel Xeon Scalable Processors

Remediation

Refer to INTEl Security Advisory for patch, upgrade or suggested workaround information.
INTEl Security Advisory