Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-8935

An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.8%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 4.6
Products affected by CVE-2020-8935
  • Google » Asylo » Version: N/A
    cpe:2.3:a:google:asylo:-
  • Google » Asylo » Version: 0.2.0
    cpe:2.3:a:google:asylo:0.2.0
  • Google » Asylo » Version: 0.2.1
    cpe:2.3:a:google:asylo:0.2.1
  • Google » Asylo » Version: 0.2.2
    cpe:2.3:a:google:asylo:0.2.2
  • Google » Asylo » Version: 0.3.0
    cpe:2.3:a:google:asylo:0.3.0
  • Google » Asylo » Version: 0.3.1
    cpe:2.3:a:google:asylo:0.3.1
  • Google » Asylo » Version: 0.3.2
    cpe:2.3:a:google:asylo:0.3.2
  • Google » Asylo » Version: 0.3.3
    cpe:2.3:a:google:asylo:0.3.3
  • Google » Asylo » Version: 0.3.4
    cpe:2.3:a:google:asylo:0.3.4
  • Google » Asylo » Version: 0.3.4.1
    cpe:2.3:a:google:asylo:0.3.4.1
  • Google » Asylo » Version: 0.3.4.2
    cpe:2.3:a:google:asylo:0.3.4.2
  • Google » Asylo » Version: 0.4.0
    cpe:2.3:a:google:asylo:0.4.0
  • Google » Asylo » Version: 0.4.1
    cpe:2.3:a:google:asylo:0.4.1
  • Google » Asylo » Version: 0.5.0
    cpe:2.3:a:google:asylo:0.5.0
  • Google » Asylo » Version: 0.5.1
    cpe:2.3:a:google:asylo:0.5.1
  • Google » Asylo » Version: 0.5.2
    cpe:2.3:a:google:asylo:0.5.2
  • Google » Asylo » Version: 0.5.3
    cpe:2.3:a:google:asylo:0.5.3
  • Google » Asylo » Version: 0.6.0
    cpe:2.3:a:google:asylo:0.6.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved