CVE-2020-8939

An out of bounds read on the encuntrustedinetntop function allows an attack to extend the result size that is used by memcpy to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4...

Memory corruption

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size...

Memory corruption

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedinetpton using an attacker controlled klinuxaddrbuffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended...

Memory corruption

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedread whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the...

CVE-2020-8942 Unchecked buffer overrun in enc_untrusted_read

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedread whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the...

CVE-2020-8943 Unchecked buffer overrun in enc_untrusted_recvfrom

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvfrom whose return size was not validated against the requested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the...

CVE-2020-8942

The CVE-2020-8942 issue is in Asylo up to version 0.6.0, where enc_untrusted_read may return data without validating the requested size. The unchecked size allows an untrusted attacker to perform an arbitrary memory read, potentially accessing memory outside the intended buffer and within the sec...

CVE-2020-8943

CVE-2020-8943 describes an arbitrary memory read vulnerability in the Asylo project, affecting versions up to 0.6.0. The root cause is an unchecked return size in enc_untrusted_recvfrom, allowing an untrusted attacker to read memory locations outside the intended buffer, including addresses withi...

CVE-2020-8941

The CVE concerns Asylo, up to version 0.6.0, with an unchecked klinux_addr_buffer parameter in enc_untrusted_inet_pton that allows an attacker to read memory outside the intended buffer, potentially exposing memory from within a secure enclave. The root cause is a missing bounds check on the para...

CVE-2020-8941 Unchecked buffer overrun in enc_untrusted_inet_pton

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedinetpton using an attacker controlled klinuxaddrbuffer parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended...

CVE-2020-8940

CVE-2020-8940 describes an arbitrary memory read in Asylo up to version 0.6.0, where an attacker can cause a read via enc_untrusted_recvmsg using a attacker-controlled result parameter. The parameter size is unchecked, enabling reads beyond the intended buffer, potentially accessing memory locati...

CVE-2020-8940 Unchecked buffer overrun in enc_untrusted_recvmsg

An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size...

CVE-2020-8939

The CVE-2020-8939 issue concerns the Asylo project: an out-of-bounds read in the function enc_untrusted_inet_ntop can cause the result size to be extended, enabling memory reads from the enclave heap via memcpy. Affected component/version details are not explicitly enumerated beyond the commit re...

CVE-2020-8939 Out of Bounds read in Asylo

An out of bounds read on the encuntrustedinetntop function allows an attack to extend the result size that is used by memcpy to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4...

CVE-2020-7543

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Legacy Controllers Modicon Quantum & Modicon Premium see security notifications for affected versions, that could cause denial of service when a specially crafted Read Physical Memo...

PT-2020-19620 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Legacy Controllers Modicon Premium affected versions not specified Description: A...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to read restricted memory...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android Pixel suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Incorrect handling of Reflect.construct in V8 allows a remote attacker to perform an out of bounds memory read via a malicious HTML page, or execute arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. Inappropriate optimization in V8 in Google Chrome allows a remote attacker to perform an out-of-bounds memory read via a crafted HTML page...