Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-8938

Опубликовано: 15 дек. 2020
Источник: nvd
CVSS3: 5.3
CVSS3: 3.3
CVSS2: 2.1
EPSS Низкий

Описание

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commit a37fb6a0e7daf30134dbbf357c9a518a1026aa02

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:asylo:*:*:*:*:*:*:*:*
Версия до 0.6.0 (включая)

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787

Связанные уязвимости

github
больше 3 лет назад

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which allows an attacker to write memory values from within the enclave. We recommend upgrading past commit a37fb6a0e7daf30134dbbf357c9a518a1026aa02

EPSS

Процентиль: 12%
0.0004
Низкий

5.3 Medium

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-787