Asylo (Google) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2021-08-02. Vendor: Google.
CVEs of Asylo
- CVE-2021-22552 - CVSS 5.5 (medium), 2021-08-02: An untrusted memory read vulnerability in Asylo versions up to 0.6.1 allows an untrusted attacker to pass a syscall number in MessageReader that is then used…
- CVE-2021-22548 - CVSS 7.8 (high), 2021-06-08: An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter…
- CVE-2021-22550 - CVSS 7.8 (high), 2021-06-08: An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past…
- CVE-2021-22549 - CVSS 7.8 (high), 2021-06-08: An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit…
- CVE-2020-8938 - CVSS 5.3 (medium), 2020-12-15: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker…
- CVE-2020-8941 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker…
- CVE-2020-8944 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output…
- CVE-2020-8937 - CVSS 5.3 (medium), 2020-12-15: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses…
- CVE-2020-8940 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker…
- CVE-2020-8943 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size…
- CVE-2020-8936 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to…
- CVE-2020-8939 - CVSS 5.5 (medium), 2020-12-15: An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within…
- CVE-2020-8942 - CVSS 5.5 (medium), 2020-12-15: An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was…
- CVE-2020-8935 - CVSS 7.8 (high), 2020-12-15: An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted…
- CVE-2020-8905 - CVSS 6.5 (medium), 2020-08-12: A buffer length validation vulnerability in Asylo versions prior to 0.6.0 allows an attacker to read data they should not have access to. The…
- CVE-2020-8904 - CVSS 9.6 (critical), 2020-08-12: An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate…
