#VU31792 Permissions, Privileges, and Access Controls in Singularity - CVE-2019-11328
Vulnerability identifier: #VU31792
Vulnerability risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-264
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Singularity
Universal components / Libraries /
Libraries used by multiple products
Vendor: Singularity
Description
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to application does not properly impose security restrictions and allows authenticated users to edit files within the `/run/singularity/instances/sing//` directory. The manipulation of those files can change the behavior of the starter-suid program when instances are joined resulting in potential privilege escalation on the host.
Mitigation
Install updates from vendor's website.
Vulnerable software versions
Singularity: 3.1.0 - 3.1.1
External links
https://lists.opensuse.org/opensuse-security-announce/2019-10/msg00028.html
https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00059.html
https://www.openwall.com/lists/oss-security/2019/05/16/1
https://www.securityfocus.com/bid/108360
https://github.com/sylabs/singularity/releases/tag/v3.2.0
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5O3TPL5OOTIZEI4H6IQBCCISBARJ6WL3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LIHV7DSEVTB5SUPEZ2UXGS3Q6WMEQSO2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNU5BUHFOTYUZVHFUSX2VG4S3RCPUEMA/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
