PT-2020-20380
CVE-2020-8942
·
تاريخ النشر
2020-12-15
·
تاريخ التحديث
2020-12-17
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Asylo versions up to 0.6.0
Description
The issue allows an untrusted attacker to make a call to
enc untrusted read whose return size was not validated against the requested size. The size parameter is unchecked, allowing the attacker to read memory locations outside of the intended buffer size, including memory addresses within the secure enclave.Recommendations
For Asylo versions up to 0.6.0, upgrade past commit b1d120a2c7d7446d2cc58d517e20a1b184b82200 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾