AS
Product
Asylo
16
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 9Low 2
Watch
Add Asylo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8905 | 6.5 | Aug 12 | A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to Affected: before 0.6.0 |
| CVE-2021-22552 | 5.5 | Aug 2 | An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used by sysno() and can… Affected: through 0.6.1 |
| CVE-2020-8944 | 5.5 | Dec 15 | An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check… Affected: through 0.6.0 |
| CVE-2020-8943 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated… Affected: through 0.6.0 |
| CVE-2020-8942 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against… Affected: through 0.6.0 |
| CVE-2020-8941 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled… Affected: through 0.6.0 |
| CVE-2020-8940 | 5.5 | Dec 15 | An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result… Affected: through 0.6.0 |
| CVE-2020-8939 | 5.5 | Dec 15 | An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap Affected: through 0.6.0 |
| CVE-2020-8936 | 5.5 | Dec 15 | An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall Affected: through 0.6.0 |
Showing 9