CVE-2020-8935
5.3
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Summary
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Google LLC | Asylo | unspecified <= 0.6.0 | affected |
Weaknesses
- Arbitrary Memory overwrite in Ecall_restore
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.