CVE-2021-3543
Medium
Description
A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.
SeverityMedium
CVSS6.7
Exploit probability—
Product
Nitro Enclaves
PublishedJun 1, 2021
First seenJun 1, 2021
Weakness typeCWE-416Use after free
How to fix
Update
- nitro_enclaves_project nitro_enclaves5.10.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nitro_enclaves_project nitro_enclaves | v < 5.10.0 | 5.10.0 |
| redhat enterprise_linux | 8.0 | — |
| fedoraproject fedora | 34 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.