high8.1
CVE-2020-25039
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Impact
Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sylabs | Singularity | from 3.2.0 through 3.6.2 |
| Opensuse | Leap | Versions 15.1, 15.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html
- https://github.com/hpcng/singularity/security/advisories/GHSA-w6v2-qchm-grj7
- https://medium.com/sylabs
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00070.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00088.html
- https://github.com/hpcng/singularity/security/advisories/GHSA-w6v2-qchm-grj7
- https://medium.com/sylabs