Design/Logic Flaw

2020-12-1515:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.

CPENameOperatorVersion
asylole0.6.0

CPE	Name	Operator	Version
	asylo	le	0.6.0

References

github.com/google/asylo/commit/ed0926bff0e423cd122a18b3d2fc772817f66825