Vulnerability · Published Dec 15, 2020 · Assigned by Google
CVE-2020-8936Arbitrary enclave memory overwrite vulnerability in ECall ecall_restore
Medium 5.3
In plain English
A medium-severity out-of-bounds read in Asylo from Google LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.1%top 97.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params and allowed the host to return a pointer that was an address within the enclave memory. This allowed an attacker to read memory values from within the enclave.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Google LLC | Asylo | 0.6.0 – through 0.6.0 |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
References
- https://github.com/google/asylo/commit/83036fd841d33baa7e039f842d131aa7881fdcc2 x_refsource_CONFIRM