CVE-2019-19724

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-19724
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19724.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-19724
Aliases
Downstream
openSUSE (3)
Related
openSUSE (3)
Published
2019-12-18T21:15:13Z
Modified
2026-06-05T14:11:57Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Insecure permissions (777) are set on $HOME/.singularity when it is newly created by Singularity (version from 3.3.0 to 3.5.1), which could lead to an information leak, and malicious redirection of operations performed against Sylabs cloud services.

References

Affected packages

Git / github.com/sylabs/singularity

Affected ranges

Type
GIT
Repo
https://github.com/sylabs/singularity
Events
Introduced
a066ffcb65c2f4a8f10a16623f228e0a7c49da2b
Last Affected
a137637e1caf38de10dbd18e2113b07fe1f0ba09
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "3.3.0"
        },
        {
            "last_affected":  "3.5.1"
        }
    ],
    "source":  "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-19724.json"