CVE-2020-8939: Out of Bounds read in Asylo
An out of bounds read on the encuntrustedinetntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8939?
CVE-2020-8939 is classified as a high severity vulnerability due to the potential for memory corruption and arbitrary code execution.
How do I fix CVE-2020-8939?
To remediate CVE-2020-8939, upgrade to a version of Google Asylo that is greater than 0.6.0 and includes the patch for this vulnerability.
What systems are affected by CVE-2020-8939?
CVE-2020-8939 affects Google Asylo versions up to and including 0.6.0.
What is the impact of exploiting CVE-2020-8939?
Exploiting CVE-2020-8939 may allow an attacker to perform unauthorized memory reads, potentially leading to data exposure or application instability.
Who reported CVE-2020-8939?
CVE-2020-8939 was reported by the Google security team as part of their ongoing vulnerability management process.