CVE-2020-8939: falha de média gravidade em Google LLC Asylo
Out of Bounds read in Asylo
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.1%
An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Produtos afetados
Google LLC · AsyloCVEs relacionadas — Google LLC Asylo
No mesmo produto, das mais perigosas para as menos.
CVE-2020-8905LOWConfidential Information Disclosure vulnerability in AsyloEPSS 0.2%CVE-2020-8904MEDIUMArbitrary trusted memory overwrite vulnerability in AsyloEPSS 0.2%CVE-2020-8944MEDIUMUnchecked buffer overrun in ecall_restoreEPSS 0.2%CVE-2021-22552MEDIUMMemory overread secure enclave in Asylo 0.6.2EPSS 0.2%CVE-2020-8935MEDIUMCVE-2020-8935EPSS 0.1%CVE-2020-8941MEDIUMUnchecked buffer overrun in enc_untrusted_inet_ptonEPSS 0.1%