CVE-2024-36293

MEDIUM

Intel(R) Processors with Intel(R) SGX - Authenticated Denial of Service via EDECCSSA User Leaf Function

Title source: llm

Description

Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.

References (3)

Core 3

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/03/msg00021.html

Various Sources

https://www.dell.com/support/kbdoc/en-us/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu

Vendor Advisory

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html

Scores

CVSS v3 6.5

EPSS 0.0023

EPSS Percentile 14.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (1)

n/a/Intel(R) Processors with Intel(R) SGX See references

Published Feb 12, 2025

Tracked Since Feb 18, 2026