CVE-2020-13847
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Singularity是一款基于Linux平台的用于独立运行应用程序的容器平台。 Sylabs Singularity 3.0版本至3.5版本中存在安全漏洞，该漏洞源于程序缺少完整性检查。远程攻击者可通过发送特制文件利用该漏洞绕过安全限制。
Possible ATT&CK Techniques 1 AI
T1157
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-13847
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Sylabs Singularity 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Singularity是一款基于Linux平台的用于独立运行应用程序的容器平台。 Sylabs Singularity 3.0版本至3.5版本中存在安全漏洞，该漏洞源于程序缺少完整性检查。远程攻击者可通过发送特制文件利用该漏洞绕过安全限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-13847
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-13847
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-13847 (1)
Mailing List Discussions for CVE-2020-13847 (3)
-
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html vendor-advisory x_refsource_SUSE
Security Blog Posts for CVE-2020-13847 (1)
-
https://medium.com/sylabs x_refsource_MISC
Same Patch Batch · n/a · 2020-07-14 · 26 CVEs total
| CVE-2020-15719 | OpenLDAP libldap 信任管理问题漏洞 | |
| CVE-2019-12773 | Verint Impact 跨站脚本漏洞 | |
| CVE-2019-12784 | Verint Impact 跨站请求伪造漏洞 | |
| CVE-2019-12783 | Verint Impact 输入验证错误漏洞 | |
| CVE-2020-11546 | SuperWebMailer 注入漏洞 | |
| CVE-2020-9297 | Netflix Titus 注入漏洞 | |
| CVE-2020-13846 | Singularity 安全漏洞 | |
| CVE-2020-15074 | OpenVPN 代码问题漏洞 | |
| CVE-2020-13845 | Sylabs Singularity 安全漏洞 | |
| CVE-2020-11827 | GOG Galaxy 安全漏洞 | |
| CVE-2020-13935 | Apache Tomcat 安全漏洞 | |
| CVE-2020-13934 | Apache Tomcat 缓冲区错误漏洞 | |
| CVE-2020-15721 | RosarioSIS 跨站脚本漏洞 | |
| CVE-2020-15711 | MISP 跨站请求伪造漏洞 | |
| CVE-2020-15720 | Dogtag PKI 信任管理问题漏洞 | |
| CVE-2020-1948 | Apache Dubbo 代码问题漏洞 | |
| CVE-2020-13753 | WebKitGTK和WPE WebKit 输入验证错误漏洞 | |
| CVE-2020-11956 | Rittal PDU-3C002DEC和CMCIII-PU-9333E0FB 操作系统命令注入漏洞 | |
| CVE-2020-11955 | Rittal PDU-3C002DEC和CMCIII-PU-9333E0FB 安全漏洞 | |
| CVE-2020-11953 | Rittal PDU-3C002DEC和CMCIII-PU-9333E0FB 操作系统命令注入漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-13847
No comments yet