CVE-2020-13845
- State
- Published
- Severity
- Not scored
- Published
- Jul 14, 2020
- Updated
- Aug 4, 2024
- Reserved
- Jun 4, 2020
Description
Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compared against the signature object descriptor(s) in the SIF file, rather than to a cryptographically validated signature.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://medium.com/sylabs
- https://github.com/hpcng/singularity/security/advisories/GHSA-pmfr-63c2-jr5c
- openSUSE-SU-2020:1011vendor-advisory
- openSUSE-SU-2020:1037vendor-advisory
- openSUSE-SU-2020:1100vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.