AS
Product
Asylo
16
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 9Low 2
Watch
Add Asylo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8904 | 9.6 | Aug 12 | An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0 Affected: before 0.6.0 |
| CVE-2021-22550 | 7.8 | Jun 8 | An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave Affected: before 0.6.3 |
| CVE-2021-22549 | 7.8 | Jun 8 | An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory Affected: before 0.6.2 |
| CVE-2021-22548 | 7.8 | Jun 8 | An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out,… Affected: before 0.6.2 |
| CVE-2020-8935 | 7.8 | Dec 15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite… Affected: through 0.6.0 |
| CVE-2020-8905 | 6.5 | Aug 12 | A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to Affected: before 0.6.0 |
| CVE-2021-22552 | 5.5 | Aug 2 | An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can… Affected: through 0.6.1 |
| CVE-2020-8944 | 5.5 | Dec 15 | An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check… Affected: through 0.6.0 |
| CVE-2020-8943 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated… Affected: through 0.6.0 |
| CVE-2020-8942 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against… Affected: through 0.6.0 |
| CVE-2020-8941 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled… Affected: through 0.6.0 |
| CVE-2020-8940 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result… Affected: through 0.6.0 |
| CVE-2020-8939 | 5.5 | Dec 15 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap Affected: through 0.6.0 |
| CVE-2020-8936 | 5.5 | Dec 15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall Affected: through 0.6.0 |
| CVE-2020-8938 | 3.3 | Dec 15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of… Affected: through 0.6.0 |
| CVE-2020-8937 | 3.3 | Dec 15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that… Affected: through 0.6.0 |
Showing 16