Vulnerabilities > CVE-2020-5499 - Unspecified vulnerability in Apache Rust SGX SDK

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

NVD

Published: 2020-01-04

Updated: 2020-01-15

Summary

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same.

Part	Description	Count
Application	Apache Apache Rust SGX SDK - Apache Rust SGX SDK 0.2.0 Apache Rust SGX SDK 0.9.0 Apache Rust SGX SDK 0.9.1 Apache Rust SGX SDK 0.9.5 Apache Rust SGX SDK 0.9.6 Apache Rust SGX SDK 0.9.7 Apache Rust SGX SDK 1.0.0 Apache Rust SGX SDK 1.0.1 Apache Rust SGX SDK 1.0.4 Apache Rust SGX SDK 1.0.5 Apache Rust SGX SDK 1.0.6 Apache Rust SGX SDK 1.0.7 Apache Rust SGX SDK 1.0.8	14