High severity7.5NVD Advisory· Published Jul 14, 2020· Updated Jun 17, 2026
CVE-2020-13847
CVE-2020-13847
Description
Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.
Affected products
7cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*range: >=3.0.0,<=3.5.0
- (no CPE)range: 3.0-3.5
- Sylabs/Singularitydescription
- osv-coords4 versionspkg:rpm/opensuse/singularity&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/singularity&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/singularity&distro=openSUSE%20Tumbleweedpkg:rpm/suse/singularity&distro=SUSE%20Package%20Hub%2015%20SP2
< 3.6.0-lp151.2.6.1+ 3 more
- (no CPE)range: < 3.6.0-lp151.2.6.1
- (no CPE)range: < 3.6.0-lp152.2.3.1
- (no CPE)range: < 3.8.3-1.2
- (no CPE)range: < 3.6.0-bp152.2.4.1
Patches
Vulnerability mechanics
References
5- github.com/hpcng/singularity/security/advisories/GHSA-m7j2-9565-4h9vnvdThird Party Advisory
- medium.com/sylabsnvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.htmlnvdBroken Link
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.htmlnvdBroken Link
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.htmlnvdBroken Link
News mentions
0No linked articles in our index yet.