CVE-2020-13847

Description

References

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html · Broken Link
• hpcng/singularity security advisory · Third Party Advisory
• medium.com/sylabs · Third Party Advisory

More vulnerabilities in singularity

• CVE-2021-33027CRITICAL 9.8Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.
• CVE-2021-33622CRITICAL 9.8Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.
• CVE-2021-32635MEDIUM 6.3Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action co…
• CVE-2021-29136MEDIUM 5.5Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink trav…
• CVE-2020-15229CRITICAL 9.3Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path trave…