CVE-2020-8940 Unchecked buffer overrun in enc_untrusted_recvmsg

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size...

CVE-2020-8940

CVE-2020-8940 describes an arbitrary memory read in Asylo up to version 0.6.0, where an attacker can cause a read via enc_untrusted_recvmsg using a attacker-controlled result parameter. The parameter size is unchecked, enabling reads beyond the intended buffer, potentially accessing memory locati...