Lucene search
+L

8 matches found

NVD
NVD
•added 2022/10/06 6:16 p.m.•35 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS0.00655EPSS
SaveExploits0References3
Prion
Prion
•added 2022/10/06 6:16 p.m.•35 views

Design/Logic Flaw

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

7.5CVSS9.4AI score0.00655EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/10/06 12:00 a.m.•53 views

CVE-2022-39237 Digital Signature Hash Algorithms Not Validated in sylabs/sif

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

6.3CVSS5.5AI score
SaveExploits0References5
Mend
Mend
•added 2022/10/06 12:00 a.m.•5 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the "github.com/sylabs/sif/v2/pkg/integrity" package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS0.00655EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•8 views

CVE-2022-39237: Improper Verification of Cryptographic Signature

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS7.1AI score0.00655EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2022/10/06 12:00 a.m.•103 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.4AI score0.00655EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2022/10/06 12:00 a.m.•121 views

CVE-2022-39237

syslabs/sif is the Singularity Image Format SIF reference implementation. In versions prior to 2.8.1the github.com/sylabs/sif/v2/pkg/integrity package did not verify that the hash algorithms used are cryptographically secure when verifying digital signatures. A patch is available in version =...

9.8CVSS6.4AI score0.00655EPSS
SaveExploits0
CVE
CVE
•added 2022/10/06 12:00 a.m.•127 views

CVE-2022-39237

CVE-2022-39237 affects the Syslabs/sif (Singularity Image Format) reference implementation. In versions prior to 2.8.1, the go module github.com/sylabs/sif/v2/pkg/integrity did not verify that the hash algorithms used for metadata digests and signatures are cryptographically secure when validatin...

9.8CVSS6.4AI score0.00655EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder