Skip to main content

Singularity CVE-2020-13846

HIGH
2020-07-14 cve@mitre.org
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 14, 2020 - 18:15 nvd
HIGH 7.5

DescriptionNVD

Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.

AnalysisAI

Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code. Affected products include: Sylabs Singularity. Version information: through 3.5.3.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2019-11328 HIGH POC
8.8 May 14

An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system

CVE-2021-33027 CRITICAL
9.8 Jul 19

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce. Rated critical severity (CVSS 9.8), thi

CVE-2021-33622 CRITICAL
9.8 Jun 15

Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value

CVE-2020-15229 CRITICAL
9.3 Oct 14

Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Rated critical sev

CVE-2020-25040 HIGH
8.8 Sep 16

Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit contain

CVE-2020-25039 HIGH
8.1 Sep 16

Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namesp

CVE-2023-30549 HIGH
7.8 Apr 25

Apptainer is an open source container platform for Linux. Rated high severity (CVSS 7.8), this vulnerability is low atta

CVE-2018-19295 HIGH
7.8 Dec 17

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. Rated high severity (CVSS

CVE-2020-13847 HIGH
7.5 Jul 14

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Rated high severity (CVSS 7.5), this vulnerabil

CVE-2020-13845 HIGH
7.5 Jul 14

Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Rated high severity (CVSS 7.5),

CVE-2019-19724 HIGH
7.5 Dec 18

Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to

CVE-2018-12021 MEDIUM
6.5 Jul 05

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. Ra

Share

CVE-2020-13846 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy