CVE-2020-8939

Published: Dec 15, 2020Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4

Affected (1)

Products: Google: Asylo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Asylo	Up to 0.6.0

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4

Source: cve-coordination@google.com

PatchThird Party Advisory

https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.