CVE-2021-22549: Arbitrary enclave memory overwrite vulnerability in Asylo TrustedPrimitives::UntrustedCall
An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22549?
CVE-2021-22549 is classified as a high severity vulnerability due to its potential for arbitrary memory overwrite.
How do I fix CVE-2021-22549?
To fix CVE-2021-22549, it is recommended to update your Google Asylo software to version 0.6.2 or later.
What software is affected by CVE-2021-22549?
CVE-2021-22549 affects Google Asylo versions prior to 0.6.2.
What is the impact of CVE-2021-22549?
The impact of CVE-2021-22549 includes the ability for an attacker to overwrite arbitrary trusted memory, leading to unauthorized actions.
Is there a workaround for CVE-2021-22549?
There is no documented workaround for CVE-2021-22549; updating to the latest version is the only mitigation.