Security Library
by Intel
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-0133 | Hig | 0.53 | 8.1 | 0.01 | Jun 9, 2021 | Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access. | ||
| CVE-2021-0131 | Med | 0.42 | 6.5 | 0.01 | Jun 9, 2021 | Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access. | ||
| CVE-2021-0134 | Med | 0.32 | 4.9 | 0.01 | Jun 9, 2021 | Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access. | ||
| CVE-2021-0132 | Med | 0.32 | 4.9 | 0.01 | Jun 9, 2021 | Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access. |
- risk 0.53cvss 8.1epss 0.01
Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access.
- risk 0.42cvss 6.5epss 0.01
Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.
- risk 0.32cvss 4.9epss 0.01
Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.
- risk 0.32cvss 4.9epss 0.01
Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.