Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2020-15224

In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the enclave heap across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information otherwise considered confidential in an enclave, which could be used in further compromises. The issue has been addressed in version 0.12.0 and the current master branch. Users will need to to recompile their applications against the patched libraries to be protected from this vulnerability.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2020-15224
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 12:34 UTC · Revision 1

Source evidence

CVE-2020-15224

core-osv · Original source

Published 14 Oct 2020, 19:15 UTC

In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the enclave heap across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information otherwise considered confidential in an enclave, which could be used in further compromises. The issue has been addressed in version 0.12.0 and the current master branch. Users will need to to recompile their applications against the patched libraries to be protected from this vulnerability.

osv:CVE-2020-15224
Complete source record
{
  "id": "c8e51c1ed52873ba906d859fd14ef452e537f3b4759c1cf2acd83ac270d8f8ec",
  "url": "https://osv.dev/vulnerability/CVE-2020-15224",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2020-15224",
    "summary": "In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host application. An attacker who successfully exploited the vulnerability could read privileged data from the enclave heap across trust boundaries. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to elevate user rights directly, but it could be used to obtain information otherwise considered confidential in an enclave, which could be used in further compromises. The issue has been addressed in version 0.12.0 and the current master branch. Users will need to to recompile their applications against the patched libraries to be protected from this vulnerability.",
    "evidence": "osv:CVE-2020-15224",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2020-15224",
      "aliases": [
        "CVE-2020-15224",
        "GHSA-525h-wxcc-f66m"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/openenclave/openenclave",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "8cc439202701234b34e4565482b7389b72eea7c8"
                },
                {
                  "fixed": "bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:openenclave:openenclave:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.12.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.12.0-rc1",
            "v0.8.1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15224.json",
            "vanir_signatures": [
              {
                "id": "CVE-2020-15224-076a84e5",
                "digest": {
                  "length": 497,
                  "function_hash": "57951330893991118842644201950518715494"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/consolefs.c",
                  "function": "_consolefs_writev"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-0beb00e2",
                "digest": {
                  "length": 497,
                  "function_hash": "40047168431343910426204955297713970451"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostepoll/hostepoll.c",
                  "function": "_epoll_writev"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-10764868",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "233659269949878661722358216657853176435",
                    "308539121393960280952080685152580548033",
                    "87792227617712083331491640266197158306",
                    "297439276461244336823133832079773429184",
                    "170352311666533965879401031536576569140",
                    "42377988440419387163308674762271502813",
                    "169773554883529511656054623364991450943",
                    "34722840736659853323663060097386277309",
                    "178624845602469878428684017895982082664",
                    "188685307905186269987379469045666963932",
                    "77589530319927097513014717074823706642",
                    "79766159387292857898118276770460151683",
                    "84625852471262776210523203611278443544",
                    "169773554883529511656054623364991450943",
                    "64394648055273773567965243560802682627",
                    "336517692310202944360716196122542874655",
                    "253623071187124682567095986316029988805",
                    "223045293319424946574784183036040911380",
                    "224772626528445003694651443193457568771",
                    "148912711599481549901869922648670399954",
                    "237519245743062427686033093710390694058",
                    "267217667619884713531493206679300273111",
                    "159089027477512344269501088545530880077",
                    "86546418699290784477577035832017853069",
                    "319743681651214741066202051461338141930",
                    "64394648055273773567965243560802682627",
                    "336517692310202944360716196122542874655",
                    "253623071187124682567095986316029988805",
                    "223045293319424946574784183036040911380",
                    "224772626528445003694651443193457568771",
                    "298921414067080245909447683051583899706",
                    "17913363376945794033344983312001493428",
                    "217073246542105648056466171374483956605",
                    "338685460621270876308033711120271633053",
                    "234401078916754312972267613345375964052",
                    "222906493608708053087051451030099847789"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostepoll/hostepoll.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-14f3fb8c",
                "digest": {
                  "length": 866,
                  "function_hash": "34180911000702394024664912441902380312"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_recvmsg"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-21be3518",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "160214753703739245658677102166435927941",
                    "135754993698404102945653869565729653739",
                    "80005690175086026704281453751606663249",
                    "273309060950254932085292866562115256886"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "include/openenclave/internal/syscall/fd.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-23217265",
                "digest": {
                  "length": 344,
                  "function_hash": "328553369188845029472574401810128416145"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_send"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-2926ef8d",
                "digest": {
                  "length": 459,
                  "function_hash": "139294466976456533749071943068274547044"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_recvfrom"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-337dc1c5",
                "digest": {
                  "length": 283,
                  "function_hash": "79302014443309507356855840716342568527"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/consolefs.c",
                  "function": "_consolefs_write"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-44084900",
                "digest": {
                  "length": 435,
                  "function_hash": "197949738119295099992434362385428245497"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_recv"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-4414f45b",
                "digest": {
                  "length": 260,
                  "function_hash": "59979578165778471159814616824404160980"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostepoll/hostepoll.c",
                  "function": "_epoll_write"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-470ab160",
                "digest": {
                  "length": 305,
                  "function_hash": "109029767356184186373191897972053445826"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_pwrite"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-4f6040fc",
                "digest": {
                  "length": 662,
                  "function_hash": "302536254420854293005539669957951078311"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_sendmsg"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-530ff483",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "9334366408934673236823265824619700942",
                    "298161149947166103110466061637654034230",
                    "129765802098259417753147115045303102015",
                    "158370253558592906304322967094768773089",
                    "307545553291764366762468078541495844905",
                    "124448599790726345281318844746253738487",
                    "200430173906914520321846533772609267440",
                    "177514984328555641926235384740866263257",
                    "85328341817409264049371027140367641763",
                    "178179756613135957364201438029698436688",
                    "138324761517219320080001049911173301147",
                    "8832920675236865861643215539015102994",
                    "148075084954129087052627014670382634701",
                    "178179756613135957364201438029698436688",
                    "138324761517219320080001049911173301147",
                    "251031541459165295180854412503063794186",
                    "80389344757907933386740905479876466042",
                    "95573885726179874827605808357783956216",
                    "165314844456879194158712708539089947707",
                    "103093526960275370891090302973237685670"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/iov.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-5817b53a",
                "digest": {
                  "length": 361,
                  "function_hash": "204135070395767478849162117837903150112"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_getsockname"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-5ba341c6",
                "digest": {
                  "length": 292,
                  "function_hash": "48654375296699282845319660714182018454"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostepoll/hostepoll.c",
                  "function": "_epoll_read"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-5c9e21ab",
                "digest": {
                  "length": 307,
                  "function_hash": "18831261928506487611829298628648264451"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_write"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-5f549549",
                "digest": {
                  "length": 560,
                  "function_hash": "106351130071165175482661752256447441722"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/consolefs.c",
                  "function": "_consolefs_readv"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-61e7acea",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "170867995238923623553374747703327093831",
                    "279867304168393367139600190916063137319",
                    "301543708321056215905326020633629128628",
                    "326780031659388838650886596870218689759",
                    "148919195133291293825684352744344002324"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/syscall.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-62498ca0",
                "digest": {
                  "length": 361,
                  "function_hash": "204135070395767478849162117837903150112"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_getpeername"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-62f2fc40",
                "digest": {
                  "length": 277,
                  "function_hash": "213808460816988684699048680083916415230"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_read"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-7569f817",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "242926211101831606856717234909721421797",
                    "73861555464605127979025998958013814165",
                    "322898777013530736823713265066793617612",
                    "42659411199477393385983048145308172307"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "include/openenclave/internal/syscall/iov.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-75dd8abd",
                "digest": {
                  "length": 592,
                  "function_hash": "313720734758172189767403554921684615410"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_readv"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-77878d2c",
                "digest": {
                  "length": 337,
                  "function_hash": "195004749610719163221771760050661184637"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/socket.c",
                  "function": "oe_recvfrom"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-7a93c96a",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "160214753703739245658677102166435927941",
                    "79522201641201080833617429952946362626",
                    "124000999151348317812091558012943600605",
                    "27111562871401718492731713372463760326"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/socket.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-7d971073",
                "digest": {
                  "length": 2095,
                  "function_hash": "293241237108213137679698400847031534850"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostresolver/hostresolver.c",
                  "function": "_hostresolver_getaddrinfo"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-80d0a199",
                "digest": {
                  "length": 573,
                  "function_hash": "106693526579836148918452936392098281971"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostepoll/hostepoll.c",
                  "function": "_epoll_readv"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-8ff3df91",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "49549856978923129622600741574086940674",
                    "159475981087970265865110391671983261103",
                    "187010884601421280861326730395609707670",
                    "160214753703739245658677102166435927941",
                    "135754993698404102945653869565729653739",
                    "118340919633056113230523976610083622879",
                    "339369776001279220868990391215863266349"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "include/openenclave/internal/syscall/sys/socket.h"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-91d3c2c1",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "189442525715407115764335620523262237300",
                    "124507192949246657126499408795357411732",
                    "207201382055988171256224261281428465699",
                    "297439276461244336823133832079773429184",
                    "170352311666533965879401031536576569140",
                    "42377988440419387163308674762271502813",
                    "169773554883529511656054623364991450943",
                    "7002690592178849813563828137870216932",
                    "289214268446970661440051103921734446228",
                    "113659050143284863738254120559623298848",
                    "190295117619513993114263563566559865190",
                    "284342061589217470880144355102162412750",
                    "78570663085150940079234578707546128636",
                    "169773554883529511656054623364991450943",
                    "225683355913715856500411528099737810943",
                    "34449122294798724317888948666884810094",
                    "303979503688996807217534031512412548453",
                    "313287319613744115562473693355816182144",
                    "318270937699836994386251517833676453263",
                    "148912711599481549901869922648670399954",
                    "237519245743062427686033093710390694058",
                    "267217667619884713531493206679300273111",
                    "304494073477911668007018730389732492839",
                    "224628868354965504202734085880178096187",
                    "26453095442384151436063146342375375125",
                    "225683355913715856500411528099737810943",
                    "261241013445167582385480863348959135233",
                    "166557470336056214191823385239370761913",
                    "156003250716642766263923509569337492085",
                    "252739565595841915636410666075418530951",
                    "298921414067080245909447683051583899706",
                    "17913363376945794033344983312001493428",
                    "217073246542105648056466171374483956605",
                    "338685460621270876308033711120271633053",
                    "234401078916754312972267613345375964052",
                    "222906493608708053087051451030099847789",
                    "189442525715407115764335620523262237300",
                    "124507192949246657126499408795357411732",
                    "244254652176386962028588447750474289054",
                    "241615137080287742175578512191779281453",
                    "58494156645100634911565764575326532137",
                    "311828568996890103860686092388942077717",
                    "260549206468535681734145665077375425222",
                    "169773554883529511656054623364991450943",
                    "189442525715407115764335620523262237300",
                    "124507192949246657126499408795357411732",
                    "142831185097511088789281470969039449611",
                    "319199984715634074240371187667955598642",
                    "45734866938302526076736721491012781871",
                    "246102843109750847901504048506890197695",
                    "260549206468535681734145665077375425222",
                    "169773554883529511656054623364991450943"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-97763f5f",
                "digest": {
                  "length": 412,
                  "function_hash": "213274114870334023735357846971651144492"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_sendto"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-a529b49b",
                "digest": {
                  "length": 1229,
                  "function_hash": "238303416465758029926686025287664335571"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/iov.c",
                  "function": "oe_iov_pack"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-aae2d341",
                "digest": {
                  "length": 592,
                  "function_hash": "313720734758172189767403554921684615410"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_readv"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-ad7a33bd",
                "digest": {
                  "length": 484,
                  "function_hash": "160672778825463473816752264592245672892"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_writev"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-bab09ec2",
                "digest": {
                  "length": 15002,
                  "function_hash": "31077915779119838626482503377437301652"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/syscall.c",
                  "function": "_syscall"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-bb76cfb5",
                "digest": {
                  "length": 299,
                  "function_hash": "132370283273030054977176683467424710255"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_pread"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-cb826866",
                "digest": {
                  "length": 277,
                  "function_hash": "213808460816988684699048680083916415230"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/consolefs.c",
                  "function": "_consolefs_read"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-d95bb5d7",
                "digest": {
                  "length": 393,
                  "function_hash": "15430811234038066802715834575624795309"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c",
                  "function": "_hostsock_getsockopt"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-d9fb7eaf",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "121010048585204304204407719864642836159",
                    "187595686582258069616781127116734504148",
                    "174926931793941257458694826621583482487",
                    "80505971161500901882400304166528450851",
                    "325308540147641528449449245984099742228",
                    "266726720695920745878766885468342810122",
                    "39328789189805456720372415809513119570",
                    "238121449809653975176507411582218918690",
                    "299905900882541899423667964993564984769",
                    "245271357465852028231378905225532399429",
                    "147853686771360110576580574013596183465",
                    "192155872645974516962201366329089639535",
                    "145902643774657426815218088324959690549",
                    "162821444283088838241531403762029391862",
                    "170659712782826792371224775566818885860",
                    "220670711752845742163463915331580233862",
                    "179947802944906492193063069616989695833",
                    "284424415953602577263440661239559203234",
                    "77566349393279174251092929309735958212",
                    "168184843707154214695466972286529059485",
                    "37071453677011998100535932961862006751",
                    "66619307617273492539789354374311699467",
                    "198508250224635117127044400504243421604",
                    "221402995567482347802790110389314949468",
                    "307140396614373672102038257042028875192",
                    "144607154750883120163138120084743376948",
                    "249553550938144902371740067992734116943",
                    "295194957577940088132426403592366123906",
                    "242239161657860833997601387640845376256",
                    "236413107981610526311726536142564066401",
                    "15198482281521594574238387026332773849",
                    "118983756276612656519605807072090251951",
                    "145902643774657426815218088324959690549",
                    "317345509210025005563835735894283652128",
                    "313100943964122581741438519509837884952",
                    "286024682229798845872604131959093718908",
                    "82747856375130051788481746690903464836",
                    "145902643774657426815218088324959690549",
                    "162821444283088838241531403762029391862",
                    "170659712782826792371224775566818885860",
                    "220670711752845742163463915331580233862",
                    "37071453677011998100535932961862006751",
                    "66619307617273492539789354374311699467",
                    "65347800324262861911795631905820921059",
                    "322729159983482269826393457302858705427",
                    "64690058999262520102414561475423784903",
                    "12508367536178682018270662394768027654",
                    "217127827075388069498511564491721799610",
                    "115120961797439477107739029277380922171",
                    "74648026101128546013162127695565568693",
                    "93372281019988317310722686755221930434",
                    "141257927573826873238620802378253869755",
                    "17346447754036915654239717973117953338",
                    "307462356484472220368379557494727669148"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostresolver/hostresolver.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-dca28198",
                "digest": {
                  "length": 484,
                  "function_hash": "160672778825463473816752264592245672892"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostfs/hostfs.c",
                  "function": "_hostfs_writev"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-e69959c3",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "254188255305202532851155210706926584754",
                    "117568971872795745183494280465198097093",
                    "72446183474794799628639834607922835652",
                    "67736041271308675306942921380649887660",
                    "31710153675414282877840219657566976711",
                    "152049415722705499193865912401070425294",
                    "169773554883529511656054623364991450943",
                    "292773935909995111759118124261891239314",
                    "163714349916214227105957288959668766161",
                    "124000999151348317812091558012943600605",
                    "27111562871401718492731713372463760326",
                    "104011465270039797615499505460932895605",
                    "325069184296733201994153807716536262670",
                    "273552999300881356935648024200008936638",
                    "65501370331339701339860490565505036553",
                    "39669875646384207176169916996527724999",
                    "206900375224969486975247876332414292373",
                    "25893491245322250671506483317980451543",
                    "165412525661703563241404418763043464803",
                    "11016385929258292899886779910467975596",
                    "299164318859397143352606910107120575845",
                    "337494214281973512274699745906305743783",
                    "45918403861673600028739300193132555687",
                    "91532568304301294619413295443469154966",
                    "83943573038094895693322364381811217671",
                    "29215714842460264221462637971310752539",
                    "338685460621270876308033711120271633053",
                    "46408946207510023320309193488226046484",
                    "152931697156602235965456127620241474318",
                    "43607455324767233244224097189943223417",
                    "155475546989869725639150810501613621939",
                    "222678170701886768779331532395348567466",
                    "96690436924784872625949626066573663256",
                    "94993681542034181411882356793116652893",
                    "269038375544829146978629961124963289011",
                    "166700051490162858506388344716559095288",
                    "77606219683463912267485731331812833669",
                    "246259873151761369753003116687115113218",
                    "187517084720350663479287017230131689598",
                    "101002169055972676930677964903199287281",
                    "8406444681612720334085537944955349304",
                    "225562262853636949972077440823778651135",
                    "7208636938735980789379144990547187808",
                    "266297897405827001839106979990515376004",
                    "64045038342184500742044878260321677351",
                    "108310576982520314388536584413237801698",
                    "158601950664027178491751543449895264840",
                    "142265417946511541126356480644781017749",
                    "254188255305202532851155210706926584754",
                    "117568971872795745183494280465198097093",
                    "124621350539614838604829971295999409010",
                    "10505210186342642962554133246630177371",
                    "253594380230971634320026656085400417497",
                    "163271087762259455220174444651973404125",
                    "169773554883529511656054623364991450943",
                    "254188255305202532851155210706926584754",
                    "117568971872795745183494280465198097093",
                    "3989644446412073516951816756429165063",
                    "163905165595506824829921720933855244930",
                    "338685460621270876308033711120271633053",
                    "327226403182070299692183459892712276960",
                    "151470364071299194771625585470128599000",
                    "249393771532605272331347949313682552550",
                    "27341260808406385331298681908083986611",
                    "183703221356952573277453481486974649308",
                    "144407074248195655416016536308485220665",
                    "286140555133511896423076217460898657037",
                    "222678170701886768779331532395348567466",
                    "334633143707156813152299014038724695824",
                    "279216335760420825986094712053775594260",
                    "225772292723340544331367412087414179356",
                    "338685460621270876308033711120271633053",
                    "234401078916754312972267613345375964052",
                    "222906493608708053087051451030099847789",
                    "52072323866313534713364698444908911206",
                    "71256133957811989672649630594570446715",
                    "174862476071605609409723968129348214118",
                    "107763327205228597868022101210339685721",
                    "247215689691995332486198250128339363173",
                    "93246280598433809725975485087604636758",
                    "291925011453311633079892434054551338015",
                    "322240294913160633432415936959723696604",
                    "280851076317654027467576735922296769142",
                    "221633571242616515548233547166365886242",
                    "169019756687025722270807730405324199146",
                    "216245295485278225123755943889432551254",
                    "338685460621270876308033711120271633053",
                    "327226403182070299692183459892712276960",
                    "151470364071299194771625585470128599000",
                    "125156840825662507974266276476839649703",
                    "173512427070056173697104615622583890469",
                    "3434954230177718044364348229042343609",
                    "293687466007688459596772782410962599161",
                    "161857642285439986036554061515308921283",
                    "18955124760025397166599685292210563836",
                    "1799315116938014418326657816343625024",
                    "171793335750686547730595393753801401360",
                    "178741620087394395198988997435994121286",
                    "135965439109982928443427985851214241408",
                    "182308378362233218130613012181874463658",
                    "63772478362461172861936762605293365625",
                    "231705265043479449843907396208563703797",
                    "83943573038094895693322364381811217671",
                    "29215714842460264221462637971310752539",
                    "338685460621270876308033711120271633053",
                    "327226403182070299692183459892712276960",
                    "151470364071299194771625585470128599000",
                    "125156840825662507974266276476839649703",
                    "173512427070056173697104615622583890469",
                    "3434954230177718044364348229042343609",
                    "293687466007688459596772782410962599161",
                    "161857642285439986036554061515308921283",
                    "18955124760025397166599685292210563836",
                    "317007075203630476073694161122342245443",
                    "4094485568145175097208615736973144006",
                    "68722590422693325726083933974204713462",
                    "320353953392986708646184551988056253624",
                    "182308378362233218130613012181874463658",
                    "63772478362461172861936762605293365625",
                    "231705265043479449843907396208563703797",
                    "83943573038094895693322364381811217671",
                    "29215714842460264221462637971310752539",
                    "338685460621270876308033711120271633053",
                    "327226403182070299692183459892712276960",
                    "151470364071299194771625585470128599000",
                    "100263336990677762337075458963008335971",
                    "214243057245076401634862943082628341074",
                    "35237166142572695189295856184921672010",
                    "108470642417803557447710367947544345820",
                    "305235713311252429540322971840626971847",
                    "56684509218442911276883437539585025199",
                    "175138070172617913423411131897950947213",
                    "33220604237877854660003176369069967167",
                    "304494073477911668007018730389732492839",
                    "224628868354965504202734085880178096187",
                    "26453095442384151436063146342375375125",
                    "100263336990677762337075458963008335971",
                    "90711142333128349570530021073198259956",
                    "153185962816983325454787003487097594669",
                    "287994664166303761639097188508711372736",
                    "80228505422076062814051248451123137743",
                    "159986338187599925834652196718994325496",
                    "256489756204304138928002404340175668380",
                    "193884634110015548373354290645339739611",
                    "338685460621270876308033711120271633053",
                    "234401078916754312972267613345375964052",
                    "222906493608708053087051451030099847789"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/devices/hostsock/hostsock.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-f9be93ec",
                "digest": {
                  "length": 1043,
                  "function_hash": "204535128385646738450592100574065546783"
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/iov.c",
                  "function": "oe_iov_sync"
                },
                "deprecated": false,
                "signature_type": "Function",
                "signature_version": "v1"
              },
              {
                "id": "CVE-2020-15224-fc6dced7",
                "digest": {
                  "threshold": 0.9,
                  "line_hashes": [
                    "202890176902512875621621406324477886298",
                    "293099967264900951097775254192948268341",
                    "1679335676619899267453424165506000837",
                    "297439276461244336823133832079773429184",
                    "170352311666533965879401031536576569140",
                    "42377988440419387163308674762271502813",
                    "169773554883529511656054623364991450943",
                    "202890176902512875621621406324477886298",
                    "293099967264900951097775254192948268341",
                    "294375416523532287389307943805981725098",
                    "20054148001904399768604743658051191968",
                    "284342061589217470880144355102162412750",
                    "78570663085150940079234578707546128636",
                    "169773554883529511656054623364991450943",
                    "225683355913715856500411528099737810943",
                    "261241013445167582385480863348959135233",
                    "166557470336056214191823385239370761913",
                    "156003250716642766263923509569337492085",
                    "252739565595841915636410666075418530951",
                    "148912711599481549901869922648670399954",
                    "237519245743062427686033093710390694058",
                    "267217667619884713531493206679300273111",
                    "159089027477512344269501088545530880077",
                    "86546418699290784477577035832017853069",
                    "319743681651214741066202051461338141930",
                    "225683355913715856500411528099737810943",
                    "34449122294798724317888948666884810094",
                    "303979503688996807217534031512412548453",
                    "313287319613744115562473693355816182144",
                    "318270937699836994386251517833676453263",
                    "298921414067080245909447683051583899706",
                    "17913363376945794033344983312001493428",
                    "217073246542105648056466171374483956605",
                    "338685460621270876308033711120271633053",
                    "234401078916754312972267613345375964052",
                    "222906493608708053087051451030099847789"
                  ]
                },
                "source": "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b",
                "target": {
                  "file": "syscall/consolefs.c"
                },
                "deprecated": false,
                "signature_type": "Line",
                "signature_version": "v1"
              }
            ],
            "vanir_signatures_modified": "2026-10-20T13:52:27Z"
          }
        }
      ],
      "modified": "2026-10-20T13:52:27.164217512Z",
      "provider": "osv",
      "references": [
        "https://github.com/openenclave/openenclave/blob/master/CHANGELOG.md#v0120",
        "https://github.com/openenclave/openenclave/security/advisories/GHSA-525h-wxcc-f66m",
        "https://github.com/openenclave/openenclave/commit/bcac8e7acb514429fee9e0b5d0c7a0308fd4d76b"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2020-15224",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 388316,
  "published_at": "2020-10-14T19:15:13.633+00:00"
}