Intel SGX DCAP for Windows: Input-validation flaw in the Windows DCAP components allowing local information disclosure

CVE-2023-42776Firmware, BMC & network fabriccurated

Impact

Input-validation flaw in the Windows DCAP components allowing local information disclosure. Low severity, but DCAP is the attestation plumbing - anything that touches it deserves a look in a confidential-compute deployment.

Who can reach it

Local authenticated user on a Windows host running DCAP.

What to do

Update SGX DCAP for Windows to 1.19.100.3 or later. Userspace, service restart.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-42776 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01014.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.