CVEvulnerability
CVE-2020-13847
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-07-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-354
Description
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
Affected configurations
• sylabs singularity (>= 3.0.0 <= 3.5.0)
Related
Weakness · CWE (1)
- CWE-354 Improper Validation of Integrity Check Value weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html Broken Link
- https://github.com/hpcng/singularity/security/advisories/GHSA-m7j2-9565-4h9v Third Party Advisory
- https://medium.com/sylabs Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html Broken Link
- https://github.com/hpcng/singularity/security/advisories/GHSA-m7j2-9565-4h9v Third Party Advisory
- https://medium.com/sylabs Third Party Advisory