Page 2 of 14 results (0.007 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2019-19724

https://notcve.org/view.php?id=CVE-2019-19724

18 Dec 2019 — Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services. Los permisos no seguros (777) se establecen en $HOME/.singularity cuando son creados nuevamente por Singularity (versiones 3.3.0 hasta 3.5.1), lo que podría conllevar a un filtrado de información y un redireccionamiento malicioso de las operaciones realizadas co... • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00025.html • CWE-276: Incorrect Default Permissions •

CVSS: 9.0EPSS: 0%CPEs: 10EXPL: 1

CVE-2019-11328

https://notcve.org/view.php?id=CVE-2019-11328

14 May 2019 — An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing//`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host. Se encontró un problema en Singularity versión 3.1.0 hasta la ... • http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00028.html • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-19295

https://notcve.org/view.php?id=CVE-2018-19295

17 Dec 2018 — Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks. Sylabs Singularity 2.4 a 2.6 permite que usuarios locales lleven a cabo ataques de validación de entradas incorrecta. • https://github.com/sylabs/singularity/releases/tag/2.6.1 • CWE-20: Improper Input Validation •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-12021

https://notcve.org/view.php?id=CVE-2018-12021

05 Jul 2018 — Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features. Singularity desde la versión 2.3.0 hasta la 2.5.1 se ha visto afectado por un control de acceso incorrecto en los sistemas que soportan la superposición (overlay) del sistema de archivos. Al emplear la opción overlay, un usuario malicioso podría acceder a inform... • http://www.openwall.com/lists/oss-security/2019/05/16/1 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •