CVE-2020-8935: Buffer Overflow
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecallrestore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8935?
CVE-2020-8935 has been classified as a high severity vulnerability due to its potential for arbitrary memory overwrite.
How do I fix CVE-2020-8935?
The recommended fix for CVE-2020-8935 is to update the Asylo library to version 0.6.1 or later.
Which versions of Asylo are affected by CVE-2020-8935?
CVE-2020-8935 affects all Asylo versions up to and including 0.6.0.
What impact does CVE-2020-8935 have on system security?
CVE-2020-8935 allows attackers to overwrite critical sections of Enclave memory, leading to potential exploitation of untrusted code.
Is CVE-2020-8935 related to any other vulnerabilities?
While CVE-2020-8935 specifically addresses an arbitrary memory overwrite, its exploitation could be linked to broader system vulnerabilities that allow code execution.