Sylabs Singularity 3.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:sylabs:singularity:3.2.0:-:*:*:*:*:*:*
part: a version: 3.2.0 update: -
| Vendor | Sylabs (550e3deb-05dd-5626-b7da-51eb3e4162e6) |
|---|---|
| Product | Singularity (a2460cf6-30d1-5c51-8eb8-b854c6bef20e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/sylabs/singularity |
purl2cpe | 2026-06-01 10:12:59.547412 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11328 |
vulnerable | 2026-06-08 05:12:36.851067 |
Details available
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g. ssh) could exploit this vulnerability due to insecure permissions allowing a user to edit files within `/run/singularity/instances/sing/<user>/<instance>`. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.
Published: 2019-05-14T20:24:29.000Z
Updated: 2024-08-04T22:48:09.093Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.