CVE-2021-33027 — Insufficient Entropy in Singularity

CWE-331 — Insufficient Entropy5 documents5 sources
Severity
9.8CRITICALNVD
EPSS
0.6%
top 30.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Sylabs Singularity
Timeline
PublishedJul 19
Latest updateMay 24

Description

Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDsylabs/singularity1.2.0 — 1.2.6+4

🔴Vulnerability Details

3
GHSA
GHSA-8jh5-pc7c-26pc: Sylabs Singularity Enterprise through 1↗2022-05-24
▶
CVEList
CVE-2021-33027: Sylabs Singularity Enterprise through 1↗2021-07-19
▶
OSV
CVE-2021-33027: Sylabs Singularity Enterprise through 1↗2021-07-19
▶

📋Vendor Advisories

1
Debian
CVE-2021-33027: singularity-container - Sylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.↗2021
▶
CVE-2021-33027 — Insufficient Entropy in Singularity | cvebase