CVE-2018-20742

ALTO 7.5CVE-2018-20742 · Published 24/01/2019 · updated 17/06/2026

In breve

CVE-2018-20742 è una vulnerabilità ALTO (CVSS 7.5) che riguarda opaque (ucbrise).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 72.4% delle vulnerabilità.
Correzione: aggiornare a 2018-12-01 o successiva.

Package	Affected versions	Patched versions
opaque ucbrise	`< 2018-12-01`	`2018-12-01`

Description

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.

References

ucbrise/opaque commit 5ddda15 · Patch
ucbrise/opaque · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free