CVE-2020-8944: Unchecked buffer overrun in ecall_restore
An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecallrestore using the attribute output which fails to check the range of a pointer. An attacker can use this pointer to write to arbitrary memory addresses including those within the secure enclave We recommend upgrading past commit 382da2b8b09cbf928668a2445efb778f76bd9c8a
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-8944?
CVE-2020-8944 is classified as a high severity vulnerability due to the potential for arbitrary memory writes by an untrusted attacker.
How do I fix CVE-2020-8944?
To fix CVE-2020-8944, upgrade to Asylo version 0.6.1 or later, which resolves the arbitrary memory write issue.
What software is affected by CVE-2020-8944?
CVE-2020-8944 affects Google Asylo versions up to 0.6.0.
What type of vulnerability is CVE-2020-8944?
CVE-2020-8944 is an arbitrary memory write vulnerability that can be exploited by an attacker.
What impact does CVE-2020-8944 have on security?
The impact of CVE-2020-8944 could allow an attacker to write to arbitrary memory addresses, potentially leading to unauthorized access or data corruption.