|
197641
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested si…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8943
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197642
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size.…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8942
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197643
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8941
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197644
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8940
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197645
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading p…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8939
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197646
|
3.3 |
LOW
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which a…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8938
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197647
|
3.3 |
LOW
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that relies on UntrustedL…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8937
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197648
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8936
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197649
|
7.8 |
HIGH
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave m…
|
CWE-119 CWE-787
Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write
|
CVE-2020-8935
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197650
|
3.3 |
LOW
Local
|
google quarkus oracle netapp
|
guava quarkus peoplesoft_enterprise_peopletools data_integrator weblogic_server nosql_database commerce_guided_search communications_cloud_native_core_network_slice_selection_fun…
|
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API c…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-8908
|
2024-11-21 14:39 |
2020-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|