CVE-2020-8938

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinuxaddr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commi...

CVE-2020-8938: Out-of-bounds Write

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinuxaddr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commi...

Google Asylo Buffer Error Vulnerability

Google Asylo is a framework for developing trusted applications from Google Inc. in the United States. The software supports the creation of a trusted execution environment, including software isolation and hardware isolation. Asylo up to 0.6.0 A security vulnerability exists in Asylo up to 0.6.0...

PT-2020-20376

Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory overwrite issue allows an attacker to make a host call to FromkLinuxSockAddr with attacker-controlled content and size of klinux addr, enabling the attacker to write memory values from...