CVE-2020-8944

An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecallrestore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to arbitrary memory addresses including those within...

CVE-2020-8935

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecallrestore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library...

PT-2020-20382

Name of the Vulnerable Software and Affected Versions Asylo versions up to 0.6.0 Description An arbitrary memory write issue allows an untrusted attacker to make a call to ecall restore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to wri...

PT-2020-20361

Name of the Vulnerable Software and Affected Versions Asylo versions prior to 0.6.0 Description The issue is related to an arbitrary memory overwrite in the trusted memory of Asylo. It occurs because the ecall restore function does not properly validate the range of the output len pointer, allowi...

CVE-2020-8904

An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecallrestore function fails to validate the range of the outputlen pointer, an attacker can manipulate the tmpoutputlen value and write to an arbitrary location in the trusted...