Skip to main content

Singularity CVE-2018-19295

HIGH
Improper Input Validation (CWE-20)
2018-12-17 cve@mitre.org
Information Disclosure Singularity
7.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Dec 17, 2018 - 15:29 nvd
HIGH 7.8

DescriptionNVD

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

AnalysisAI

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. Affected products include: Sylabs Singularity.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Singularity

View all
CVE-2019-11328 HIGH POC
8.8 May 14

An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system
CVE-2021-33027 CRITICAL
9.8 Jul 19

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce. Rated critical severity (CVSS 9.8), thi
CVE-2021-33622 CRITICAL
9.8 Jun 15

Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value
CVE-2020-15229 CRITICAL
9.3 Oct 14

Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Rated critical sev
CVE-2020-25040 HIGH
8.8 Sep 16

Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit contain
CVE-2020-25039 HIGH
8.1 Sep 16

Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namesp
CVE-2023-30549 HIGH
7.8 Apr 25

Apptainer is an open source container platform for Linux. Rated high severity (CVSS 7.8), this vulnerability is low atta
CVE-2020-13847 HIGH
7.5 Jul 14

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Rated high severity (CVSS 7.5), this vulnerabil
CVE-2020-13846 HIGH
7.5 Jul 14

Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code. Rated high severity (CVSS 7.5), this v
CVE-2020-13845 HIGH
7.5 Jul 14

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Rated high severity (CVSS 7.5),

CVE-2019-19724 HIGH
7.5 Dec 18

Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to

CVE-2018-12021 MEDIUM
6.5 Jul 05

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. Ra

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2018-19295 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy