Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:OPENSUSE-SU-2024:14059-1
HistoryJun 20, 2024 - 12:00 a.m.

singularity-ce-4.1.3-1.1 on GA media

2024-06-2000:00:00
Google
osv.dev
1
singularity
ce
4.1.3
security
update
opensuse
tumbleweed

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.051

Percentile

93.1%

JSON

These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

Related

nessus 25
f5 1
ibm 3
openvas 9
osv 71
thn 1
gentoo 4
alpinelinux 7
ubuntucve 6
nvd 6
cvelist 6
debiancve 2
fedora 3
prion 6
veracode 6
cnvd 1
cve 7
cbl_mariner 15
redhatcve 5
wolfi 4
github 5
cgr 4
vulnrichment 2
nessus
nessus
Docker Desktop < 4.27.1 Multiple Vulnerabilities
2024-02-09 00:00:00
Docker Desktop < 4.27.1 Multiple Vulnerabilities
2024-02-09 00:00:00
Docker Desktop < 4.27.1 Multiple Vulnerabilities
2024-02-09 00:00:00
f5
f5
K000139361 : Moby Buildkit vulnerabilities CVE-2024-23651,CVE-2024-23652, and CVE-2024-23653
2024-04-22 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in Moby BuildKit affect IBM watsonx.data
2024-09-18 20:03:03
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-02-28 17:16:56
Security Bulletin: IBM Concert Software is vulnerable to multiple issues
2024-08-22 17:47:08
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0586-1)
2024-02-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2801-2)
2024-08-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2801-1)
2024-08-07 00:00:00
osv
osv
docker-24.0.7_ce-3.1 on GA media
2024-06-15 00:00:00
buildkit-0.12.5-1.1 on GA media
2024-06-15 00:00:00
Security update for buildah, docker
2024-09-03 15:13:23
thn
thn
RunC Flaws Enable Container Escapes, Granting Attackers Host Access
2024-01-31 20:00:00
gentoo
gentoo
Buildah: Multiple Vulnerabilities
2024-07-10 00:00:00
Apptainer: Lack of Digital Signature Hash Verification
2022-10-31 00:00:00
Docker: Multiple Vulnerabilities
2024-09-28 00:00:00
alpinelinux
alpinelinux
CVE-2022-23538
2023-01-17 21:15:11
CVE-2022-39237
2022-10-06 18:16:10
CVE-2024-23652
2024-01-31 22:15:54
ubuntucve
ubuntucve
CVE-2022-39237
2022-10-06 00:00:00
CVE-2022-23538
2023-01-17 00:00:00
CVE-2024-23650
2024-01-31 00:00:00
nvd
nvd
CVE-2022-39237
2022-10-06 18:16:10
CVE-2022-23538
2023-01-17 21:15:11
CVE-2024-23650
2024-01-31 22:15:53
cvelist
cvelist
CVE-2022-39237 Digital Signature Hash Algorithms Not Validated in sylabs/sif
2022-10-06 00:00:00
CVE-2022-23538 User credentials leaked to third-party service via HTTP redirect in scs-library-client
2023-01-17 20:06:25
CVE-2024-23651 BuildKit possible race condition with accessing subpaths from cache mounts
2024-01-31 21:49:18
debiancve
debiancve
CVE-2022-23538
2023-01-17 21:15:11
CVE-2022-39237
2022-10-06 18:16:10
fedora
fedora
[SECURITY] Fedora 36 Update: apptainer-1.1.6-1.fc36
2023-02-22 11:10:37
[SECURITY] Fedora 37 Update: apptainer-1.1.6-1.fc37
2023-02-22 10:16:22
[SECURITY] Fedora 40 Update: podman-5.0.3-1.fc40
2024-05-17 01:09:09
prion
prion
Authorization
2023-01-17 21:15:00
Design/Logic Flaw
2024-01-31 22:15:00
Design/Logic Flaw
2022-10-06 18:16:00
veracode
veracode
Information Disclosure
2023-01-24 05:37:21
Improper Verification Of Cryptographic Signatures
2022-10-07 09:37:48
Missing Entitlement Check
2024-02-01 07:42:22
cnvd
cnvd
Singularity Image Format Encryption Problem Vulnerability
2022-10-10 00:00:00
cve
cve
CVE-2022-23538
2023-01-17 21:15:11
CVE-2022-39237
2022-10-06 18:16:10
CVE-2024-23651
2024-01-31 22:15:54
cbl_mariner
cbl_mariner
CVE-2024-23650 affecting package docker-compose for versions less than 2.27.0-1
2024-05-17 21:38:35
CVE-2024-23650 affecting package moby-engine for versions less than 25.0.3-1
2024-03-19 17:21:46
CVE-2024-23650 affecting package docker-buildx for versions less than 0.14.0-1
2024-05-17 21:38:35
redhatcve
redhatcve
CVE-2024-23650
2024-02-01 15:38:29
CVE-2024-23652
2024-02-01 14:33:15
CVE-2024-23651
2024-02-01 14:31:00
wolfi
wolfi
CVE-2024-23650 vulnerabilities
2024-09-28 16:03:05
CVE-2024-23652 vulnerabilities
2024-09-28 16:03:05
CVE-2024-23651 vulnerabilities
2024-09-28 16:03:05
github
github
scs-library-client may leak user credentials to third-party service via HTTP redirect
2023-01-20 22:38:04
BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts
2024-01-31 22:43:32
BuildKit vulnerable to possible host system access from mount stub cleaner
2024-01-31 22:43:26
cgr
cgr
CVE-2024-23650 vulnerabilities
2024-05-19 03:07:16
CVE-2024-23651 vulnerabilities
2024-05-19 03:07:16
CVE-2024-23652 vulnerabilities
2024-05-19 03:07:16
vulnrichment
vulnrichment
CVE-2024-23653 BuildKit interactive containers API does not validate entitlements check
2024-01-31 22:03:56
CVE-2024-3727 Containers/image: digest type does not guarantee valid type
2024-05-09 14:57:21

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.051

Percentile

93.1%

JSON
Related for OSV:OPENSUSE-SU-2024:14059-1
nessus25f51ibm3openvas9osv71thn1gentoo4alpinelinux7ubuntucve6nvd6cvelist6debiancve2fedora3prion6veracode6cnvd1cve7cbl_mariner15redhatcve5wolfi4github5cgr4vulnrichment2