Vulnerabilities > CVE-2018-20742 - Out-of-bounds Write vulnerability in Ucbrise Opaque

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
ucbrise
CWE-787

Summary

An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.

Vulnerable Configurations

Part Description Count
Application
Ucbrise
1

Common Weakness Enumeration (CWE)