TI-2023-14384 CVE-2023-30549 · GHSA-j4rf-7357-f4cg
Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer
Priority LOW 34
Apptainer is an open source container platform for Linux.
Vulnerabilities
15 records
TI-2021-12634 CVE-2021-33027 · GHSA-8jh5-pc7c-26pc
Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.
Priority MEDIUM 45
Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.
TI-2021-12997 CVE-2021-33622 · GHSA-cq54-mjwx-5pjw
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect…
Priority MEDIUM 45
Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.
TI-2021-12304 CVE-2021-32635 · GHSA-5mv9-q7fq-9394
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
Priority LOW 31
Singularity is an open source container platform.
TI-2021-10007 CVE-2021-29136 · GHSA-9m95-8hx6-7p9v
Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host…
Priority LOW 25
Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used.
TI-2020-12001 CVE-2020-15229 · GHSA-7gcp-w6ww-2xv9
Path traversal and files overwrite with unsquashfs
Priority MEDIUM 44
Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability.
TI-2020-15301 CVE-2020-25040 · GHSA-jv9c-w74q-6762
Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used…
Priority MEDIUM 42
Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, a different vulnerability than CVE-2020-25039.
TI-2020-15300 CVE-2020-25039 · GHSA-w6v2-qchm-grj7
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories…
Priority LOW 39
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
TI-2020-10832 CVE-2020-13846 · GHSA-6w7g-p4jh-rf92
Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
Priority LOW 36
Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
TI-2020-10831 CVE-2020-13845 · GHSA-pmfr-63c2-jr5c
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value.
Priority LOW 33
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value.
TI-2020-10833 CVE-2020-13847
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check.
Priority LOW 34
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check.
TI-2019-14210 CVE-2019-19724 · GHSA-mj73-5x75-9phh
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by…
Priority LOW 35
Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed a…
TI-2019-08462 CVE-2019-11328 · GHSA-557g-r22w-9wvx
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with…
Priority MEDIUM 42
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g.
TI-2018-13679 CVE-2018-19295 · GHSA-p83v-8vmr-qfv9
Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.
Priority LOW 34
Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.
TI-2018-08615 CVE-2018-12021 · GHSA-4x32-h296-rg6j
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems…
Priority LOW 32
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system.