Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave memory address. We recommend updating your library.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Google Asylo 缓冲区错误漏洞
Vulnerability Description
Google Asylo是美国Google公司的一个用于开发可信应用程序的框架。该软件支持创建一个可信任的执行环境，包括软件隔离和硬件隔离。 Google Asylo 版本 0.6.0 及之前版本存在缓冲区错误漏洞，该漏洞允许攻击者可利用该漏洞进行Ecall恢复函数调用来重新分配不可信的代码并覆盖Enclave内存地址的部分。
CVSS Information
N/A
Vulnerability Type
N/A