CVE-2020-13847

Katalog CVE

CVSS 7.5 · High EPSS 0,63%

Kerentanan Improper Validation of Integrity Check Value pada sylabs singularity. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.

Rincian

Terbit di NVD

14 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-354: Improper Validation of Integrity Check Value

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/hpcng/singularity/security/advisories/GHSA-m7j2-9565-4h9v advisory pihak ketiga
• https://medium.com/sylabs advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html broken link
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html broken link
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html broken link