Lucene search

CVE-2020-15224

🗓️ 14 Oct 2020 19:13:15Reported by GitHub_MType

In Open Enclave before version 0.12.0, an information disclosure vulnerability allows reading privileged data from enclave heap

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2020-15224	14 Oct 202019:15	–	nvd
OSV	CVE-2020-15224	14 Oct 202019:15	–	osv
Cvelist	CVE-2020-15224 Socket syscalls can leak enclave memory contents in Open Enclave	14 Oct 202018:35	–	cvelist
Prion	Information disclosure	14 Oct 202019:15	–	prion

Nvd

Vulners

Node

openenclave openenclaveRange<0.12.0

[
  {
    "product": "openenclave",
    "vendor": "openenclave",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.12.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b
github	www.github.com/openenclave/openenclave/blob/master/CHANGELOG.md
github	www.github.com/openenclave/openenclave/security/advisories/GHSA-525h-wxcc-f66m

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Oct 2020 19:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS22.7

CVSS36.8

EPSS0.00102

CWE-552