{"id":"CVE-2018-20742","details":"An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.","modified":"2026-07-08T18:17:54.369787Z","published":"2019-01-24T05:29:00.753Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:ucbrise:opaque:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"2018-12-01"}],"source":"CPE_RANGE","vendor_product":"ucbrise:opaque"},{"extracted_events":[{"fixed":"2018-12-01"}],"source":"DESCRIPTION"}]},"references":[{"type":"FIX","url":"https://github.com/ucbrise/opaque/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36"},{"type":"FIX","url":"https://github.com/ucbrise/opaque/issues/66"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mc2-project/opaque-sql","events":[{"introduced":"0"},{"fixed":"5ddda15d89f5ac82f4416208c5319ace4aecdc36"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20742.json","vanir_signatures_modified":"2026-07-08T18:17:54Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_find_range_bounds"},"deprecated":false,"digest":{"function_hash":"284098243613786490480073843291487550912","length":263},"id":"CVE-2018-20742-0fc42f69"},{"deprecated":false,"digest":{"function_hash":"148590096683225037690233649450281401323","length":241},"id":"CVE-2018-20742-0fe98d01","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_scan_collect_last_primary"}},{"target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_encrypt"},"deprecated":false,"digest":{"function_hash":"258647976247338392647254326997447144548","length":292},"id":"CVE-2018-20742-292a174f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36"},{"deprecated":false,"digest":{"function_hash":"148590096683225037690233649450281401323","length":241},"id":"CVE-2018-20742-3be2eded","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_external_sort"}},{"signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/App/App.cpp"},"deprecated":false,"digest":{"line_hashes":["55711312421527039695562406978469720307","21621393102387289067723629547573991852","202097569512681946139620486538318165368","202149165311390819875114663319242875692"],"threshold":0.9},"id":"CVE-2018-20742-3de02b2d","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["194877431531546983878193026775529421225","246854314775194106169711291768823374200","145474629349001699198101215428887733905","104599101138461500482133787409593074458","73269092137361018220922800634162714612","131116365652562216645642406653032273615","65447509443432863242472297391817209407","332934264925539236402636209123959817862","194352147068864472435360661136503525698","69014966731615672075079053651562743465","67586860657506507914773516824415206794","11420745578340849502529334073554449217","158215310319124162335234189211204875603","220186469292068021003600290236691355396","164681566618246568007482108211374436533","87560273953553739900639861244178463189","196886573295492174773698478537603724465","239968542378222237926991442511005616437","181463199851764839791956879131332584104","56523422453084096474349750797756935567","67400686971124254103857766765569263745","71555212650847088728593769731293791690","54312419519396677081192779328553858258","186326264451115466998692106658271719275","80063260715793016879272889342574753562","30373340204068476264285985242939591072","92040541773397539340241088811461611611","246464468487448588706404110217176957020","30962857044257155934771081501275997214","89999021561183845244028386751940771771","169845491957597415881039496984849855492","32293030903161644518105974351128679740","24695619577236341855307010162430957144","49388320778089283002926802368947877398","259649721895549032548133732088342899939","11192187541807720728229167850237691858","15640607102529161413059702726529905086","62518775786939887839283713491764533105","257057867752106356129623093080142773577","291232796897774586484143944634587148901","259973237907487889917004822833687905673","319649322457490747787591550159363952786","214228167817976068037263873637940270556","210871525763765835180440577944409033982","158451181229762143473476339158613731430","183860857234889299504900638267839447675","271452059899114397823404770075137699485"],"threshold":0.9},"id":"CVE-2018-20742-592a8703","signature_type":"Line","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp"}},{"target":{"function":"ecall_filter","file":"src/enclave/Enclave/Enclave.cpp"},"deprecated":false,"digest":{"function_hash":"148590096683225037690233649450281401323","length":241},"id":"CVE-2018-20742-6395812f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36"},{"id":"CVE-2018-20742-795824b0","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"function":"ecall_sample","file":"src/enclave/Enclave/Enclave.cpp"},"deprecated":false,"digest":{"function_hash":"151357186275419173194179980647324979867","length":195}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/util.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["213438396551518774278406408018166822293","90467301485542527403038680753120366710","214738449059838085852478202394692590413"]},"id":"CVE-2018-20742-814352ed"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_non_oblivious_sort_merge_join"},"deprecated":false,"digest":{"function_hash":"33982082924825068010707928377303664040","length":287},"id":"CVE-2018-20742-815da0de"},{"source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_non_oblivious_aggregate_step1"},"deprecated":false,"digest":{"function_hash":"335430523003154927563894273453585721244","length":341},"id":"CVE-2018-20742-98b72b75","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"148590096683225037690233649450281401323","length":241},"id":"CVE-2018-20742-9f3097e0","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/Enclave.cpp","function":"ecall_project"}},{"signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"function":"ecall_partition_for_sort","file":"src/enclave/Enclave/Enclave.cpp"},"deprecated":false,"digest":{"function_hash":"321665603671109523750470429897092431432","length":309},"id":"CVE-2018-20742-a1885703","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"152333212482146625997171553811634219997","length":379},"id":"CVE-2018-20742-db1e9657","signature_type":"Function","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"function":"ecall_non_oblivious_aggregate_step2","file":"src/enclave/Enclave/Enclave.cpp"}},{"digest":{"line_hashes":["131697561080263015513897351380022598814","293496674432405387050565827515466698581","152711785744718018660751434729579866376","329016652675572042629550383195679397674","81491714334568359548244852891422280477","57684799677815426926303254046380625361","173736077583440788959661568183981909045"],"threshold":0.9},"id":"CVE-2018-20742-e1aaee3c","signature_type":"Line","signature_version":"v1","source":"https://github.com/mc2-project/opaque-sql/commit/5ddda15d89f5ac82f4416208c5319ace4aecdc36","target":{"file":"src/enclave/Enclave/util.cpp"},"deprecated":false}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}