Sylabs Singularity Improper Input Validation · CVE-2018-19295 · GitHub Advisory Database · GitHub

Sylabs Singularity Improper Input Validation

High severity GitHub Reviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Oct 15, 2023

Package

github.com/sylabs/singularity (Go)

Affected versions

>= 2.4.0, < 2.6.1

Patched versions

2.6.1

Description

Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

References

Published by the National Vulnerability Database

Dec 17, 2018

Published to the GitHub Advisory Database May 14, 2022

Reviewed Jul 25, 2023

Last updated Oct 15, 2023

Severity

High

7.8

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H