PT-2020-20373

CVE-2020-8935

·

Published

2020-12-15

·

Updated

2021-07-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0
Description The issue allows an attacker to make an Ecall restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address, due to an arbitrary memory overwrite.
Recommendations Update the library to a version later than 0.6.0.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2020-8935
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com