CVE-2020-13847 PUBLISHED

Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF file.

EPSS 0.19% · 40.6th percentile

Risk Scores

EPSS Score
0.19%
40.6th percentile

Affected Products

VendorProductVersions
Ubuntu:25.10singularity-container0, 4.1.5+ds4-1
Ubuntu:Pro:24.04:LTSsingularity-container4.1.1+ds2-1, 0, 4.1.1+ds2-1ubuntu0.2
Ubuntu:Pro:18.04:LTSsingularity-container2.3.1-2, *, 0

Timeline

References

Open in Interactive Console →