CVE-2020-8939 is an out-of-bounds read vulnerability in Google Asylo's enc_untrusted_inet_ntop function, allowing an attacker to read sensitive memory from the enclave heap. With a CVSS score of 5.5 (Medium), this low-complexity local attack could lead to high confidentiality impact. There is no known public exploit code, active exploitation, or significant community discussion surrounding this vulnerability. Organizations using Google Asylo are advised to upgrade to a version past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4 to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 0.6.0CPE matchmatch criteria | cpe:2.3:a:google:asylo:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.