CVE-2020-8935

2020-12-1515:15:12

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

CPENameOperatorVersion
asyloeqbuildenv-v0.3.4
asyloeq0.3.4.1
asyloeq0.4.0
asyloeqbuildenv-v0.4.1
asyloeq0.3.0
asyloeq0.3.4
asyloeq0.5.3
asyloeq0.5.2
asyloeqbuildenv-v0.2.1
asyloeqbuildenv-v0.2.0

Name	Operator	Version
asylo	eq	buildenv-v0.3.4
asylo	eq	0.3.4.1
asylo	eq	0.4.0
asylo	eq	buildenv-v0.4.1
asylo	eq	0.3.0
asylo	eq	0.3.4
asylo	eq	0.5.3
asylo	eq	0.5.2
asylo	eq	buildenv-v0.2.1
asylo	eq	buildenv-v0.2.0