CVE-2020-16991

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16970

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16982

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16987

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16984

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16970

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16984

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16987

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16982

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

Remote code execution

Azure Sphere Unsigned Code Execution Vulnerability...

CVE-2020-16994 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16994 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16994

Azure Sphere has a code‑execution vulnerability in the normal world via unsigned code execution through /proc/self/mem. The TALOS advisory details how a process can write to its own memory by leveraging a Linux kernel behavior that allows memory to be writable and executable, circumventing protec...

CVE-2020-16991 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16991

Azure Sphere contains a signed-code-execution vulnerability in the Normal World. A specially crafted shellcode can be executed by abusing ptrace to modify a running process’s memory, bypassing write protections and enabling arbitrary code execution. TALOS documents this as a local, low-attack-sur...

CVE-2020-16987 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16984 Azure Sphere Unsigned Code Execution Vulnerability

...

CVE-2020-16984

CVE-2020-16984 is an Azure Sphere unsigned code execution vulnerability affecting the Azure Sphere Linux-based OS. The root cause is the READ_IMPLIES_EXEC personality, which can cause PROT_READ pages to be treated as executable during memory operations (brk/mmap), potentially creating an executab...