Kmstool Enclave
Monthly
Heap memory corruption inside AWS Nitro Enclaves built from the kmstool-enclave sample application: an application running on the parent EC2 instance can send a crafted ordered sequence of SetClient and Decrypt control messages over vsock and trigger a use-after-free and double-free in the enclave's heap (CWE-416/CWE-415), potentially achieving arbitrary code execution within the enclave. Only enclave images that include kmstool-enclave or code derived from it are affected, in aws-nitro-enclaves-sdk-c versions up to and including v0.4.5; the SDK library itself is not affected and AWS states that no cross-instance, cross-account or cross-tenant access is possible. The issue is fixed in v0.4.6, no workarounds exist, and no public exploit code was identified at time of analysis.
Heap memory corruption inside AWS Nitro Enclaves built from the kmstool-enclave sample application: an application running on the parent EC2 instance can send a crafted ordered sequence of SetClient and Decrypt control messages over vsock and trigger a use-after-free and double-free in the enclave's heap (CWE-416/CWE-415), potentially achieving arbitrary code execution within the enclave. Only enclave images that include kmstool-enclave or code derived from it are affected, in aws-nitro-enclaves-sdk-c versions up to and including v0.4.5; the SDK library itself is not affected and AWS states that no cross-instance, cross-account or cross-tenant access is possible. The issue is fixed in v0.4.6, no workarounds exist, and no public exploit code was identified at time of analysis.