CVE-2020-8939

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8939
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8939.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-8939
Published
2020-12-15T15:15:13.363Z
Modified
2026-07-08T20:43:37.869433Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

An out of bounds read on the encuntrustedinet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading past commit 6ff3b77ffe110a33a2f93848a6333f33616f02c4

References

Affected packages

Git / github.com/google/asylo

Affected ranges

Type
GIT
Repo
https://github.com/google/asylo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
299f804acbb95a612ab7c504d25ab908aa59ae93
Fixed
6ff3b77ffe110a33a2f93848a6333f33616f02c4
Database specific
Show details 
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:google:asylo:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6.0"
        }
    ]
}

Affected versions

buildenv-v0.*
buildenv-v0.2.0
buildenv-v0.2.1
buildenv-v0.2.2
buildenv-v0.3.0
buildenv-v0.3.1
buildenv-v0.3.2
buildenv-v0.3.3
buildenv-v0.3.4
buildenv-v0.4.0
buildenv-v0.4.1
buildenv-v0.5.0
buildenv-v0.5.1
buildenv-v0.5.2
buildenv-v0.5.3
buildenv-v0.6.0
v0.*
v0.2.0
v0.2.1
v0.2.2
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.3.4
v0.3.4.1
v0.4.0
v0.4.1
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.6.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8939.json"
vanir_signatures 
[
    {
        "signature_type": "Function",
        "digest": {
            "function_hash": "135038296171550800255256998280934211969",
            "length": 991.0
        },
        "target": {
            "function": "enc_untrusted_inet_ntop",
            "file": "asylo/platform/host_call/trusted/host_calls.cc"
        },
        "source": "https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4",
        "signature_version": "v1",
        "id": "CVE-2020-8939-8b91fab6",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "153814041358479376129214332076057155395",
                "45922329269225053110307145393781663788",
                "120923426945754041805254235783950991193",
                "79748621226130253570625482495852408872",
                "242354140484151961163145778075231999227",
                "153518137929070858687433313067831900743"
            ]
        },
        "target": {
            "file": "asylo/platform/host_call/trusted/host_calls.cc"
        },
        "source": "https://github.com/google/asylo/commit/6ff3b77ffe110a33a2f93848a6333f33616f02c4",
        "signature_version": "v1",
        "id": "CVE-2020-8939-8dfe20e5",
        "deprecated": false
    }
]
vanir_signatures_modified 
"2026-07-08T20:43:37Z"