CVE-2019-11328

Name of the Vulnerable Software and Affected Versions Singularity versions 3.1.0 through 3.2.0-rc2

Description An issue allows a malicious user with local or network access to the host system to exploit insecure permissions. This enables the user to edit files within /run/singularity/instances/sing/<user>/<instance>, potentially changing the behavior of the starter-suid program when instances are joined, resulting in possible privilege escalation on the host.

Recommendations For Singularity versions 3.1.0 through 3.2.0-rc2, consider restricting access to the /run/singularity/instances/sing/<user>/<instance> directory to prevent unauthorized file edits until a patch is available.