Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UC Berkeley RISE Opaque 安全漏洞
Vulnerability Description
UC Berkeley RISE Opaque是使用在Apache Spark SQL的软件包。该产品使用Intel SGX可信硬件对DataFrame进行加密，用于在不受信任的云中启用对敏感数据的分析。 UC Berkeley RISE Opaque 2018-12-01之前版本中存在安全漏洞，该漏洞源于程序没有对ocall_malloc执行边界检查。攻击者可利用该漏洞写入内存。
CVSS Information
N/A
Vulnerability Type
N/A