VDB
BDU%3A2024-03807
BDU%3A2024-03807
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость интерпретатора языка программирования R, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код в целевой системе
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Fedora Project, R Foundation | Debian GNU/Linux, Fedora, R |
Timeline
- May 17, 2024 CVE Published
References
- https://www.kb.cert.org/vuls/id/238194 url
- https://cran.r-project.org/doc/manuals/r-release/fullrefman.pdf url
- https://cran.r-project.org/ url
- https://hiddenlayer.com/research/r-bitrary-code-execution/ url
- https://www.openwall.com/lists/oss-security/2024/04/29/3 url
- https://www.cybersecurity-help.cz/vdb/SB2024043015 url
- https://www.cybersecurity-help.cz/vdb/SB20240430102 url
- https://www.cybersecurity-help.cz/vdb/SB20240430103 url
- https://stat.ethz.ch/pipermail/r-announce/2024/000701.html advisory
- https://security-tracker.debian.org/tracker/CVE-2024-27322 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ZLV4OWXZIJ7EFBIWUZADUSHYJTFAQ4D/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JVE5FDLFJGTAMOSJ6DREFAODEUBRFWSG/ advisory