CVE-2020-8766

MEDIUM 6.5CVE-2020-8766 · Published 12/11/2020 · updated 17/06/2026

In short

CVE-2020-8766 is a MEDIUM (CVSS 6.5) vulnerability affecting software guard extensions data center attestation primitives (intel).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.4% of all vulnerabilities.
Fix: update to 1.6 or later.

Package	Affected versions	Patched versions
software guard extensions data center attestation primitives intel	`< 1.6`	`1.6`

Description

Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

References

intel.com/content/www/us/en/security-center/advisory/intel-sa-00398 · Vendor Advisory

More vulnerabilities in software guard extensions data center attestation primitives

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free