Lucene search
+L

7 matches found

NVD
NVD
•added 2022/10/06 6:16 p.m.•32 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS0.00533EPSS
SaveExploits0References3
Prion
Prion
•added 2022/10/06 6:16 p.m.•32 views

Design/Logic Flaw

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

7.5CVSS9.4AI score0.00533EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/10/06 12:00 a.m.•119 views

CVE-2022-39237

CVE-2022-39237 affects the Syslabs/sif (Singularity Image Format) reference implementation. In versions prior to 2.8.1, the go module github.com/sylabs/sif/v2/pkg/integrity did not verify that the hash algorithms used for metadata digests and signatures are cryptographically secure when validatin...

9.8CVSS6.4AI score0.00533EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/10/06 12:00 a.m.•46 views

CVE-2022-39237 Digital Signature Hash Algorithms Not Validated in sylabs/sif

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

6.3CVSS5.5AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2022/10/06 12:00 a.m.•114 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.4AI score0.00533EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•3 views

CVE-2022-39237: Improper Verification of Cryptographic Signature

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS7.1AI score0.00533EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2022/10/06 12:00 a.m.•99 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.4AI score0.00533EPSS
SaveExploits0
Rows per page
Query Builder