Skip to content
Sign in
5.3 Medium

CVE-2020-8939 An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by…

Description

An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4

Affected products and versions

Product Affected versions Fixed in
Asylo 0.6 earliest → 0.6.0 No fix stated

Other CVEs of Asylo

The 16 CVEs of Asylo →
CVE-2021-22552 An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall… 5.3 Medium CVE-2021-22550 An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave 6.5 Medium CVE-2021-22549 An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory 6.5 Medium CVE-2021-22548 An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted… 6.5 Medium
Track this CVE