Vulnerability · Published Dec 15, 2020 · Assigned by Google

CVE-2020-8944Unchecked buffer overrun in ecall_restore

Medium 5.3

In plain English

A medium-severity buffer overflow in Asylo from Google LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 95.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to arbitrary memory addresses including those within the secure enclave We recommend upgrading past commit 382da2b8b09cbf928668a2445efb778f76bd9c8a

Affected products (as reported)

Vendor	Product	Versions
Google LLC	Asylo	unspecified – through 0.6.0

Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

References

https://github.com/google/asylo/commit/382da2b8b09cbf928668a2445efb778f76bd9c8a x_refsource_CONFIRM