CVE-2020-13846: High severity Sylabs Singularity vulnerability
Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/singularityto a version that resolves this vulnerability.Fixed in 3.6.0-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2020-13846.
What is the severity of CVE-2020-13846?
The severity of CVE-2020-13846 is high with a CVSS score of 7.5.
What software versions are affected by CVE-2020-13846?
Sylabs Singularity versions 3.5.0 through 3.5.3 are affected by CVE-2020-13846.
How does CVE-2020-13846 impact security?
CVE-2020-13846 allows attackers to avoid error reporting in a Status Code, potentially leading to security vulnerabilities.
Are there any references available for CVE-2020-13846?
Yes, you can find references for CVE-2020-13846 at the following links: [Reference 1](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00046.html), [Reference 2](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html), [Reference 3](http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00053.html).