Summary
It was discovered that Singularity incorrectly handled certain inputs. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2018-19295)
It was discovered that Singularity incorrectly handled access control. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2018-12021)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | singularity-container | 2.4.2-4ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 7.8
Sylabs Singularity Improper Input Validation
Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.
-
Medium 6.5
Singularity Incorrect Access Control
Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.