Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD4A1E2BAD-0836-11EF-9FD2-1C697A616631
HistoryApr 29, 2024 - 12:00 a.m.

R -- arbitrary code execution vulnerability

2024-04-2900:00:00
vuxml.freebsd.org
9
r programming language
arbitrary code execution
deserialization
rds file
r package
security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

HiddenLayer Research reports:

Deserialization of untrusted data can occur in the R statistical programming language, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchr< 4.4.0UNKNOWN

Related

osv 1
vulnrichment 1
amazon 1
openvas 2
nessus 6
cvelist 1
debiancve 1
nvd 1
veracode 1
fedora 2
thn 1
cert 1
cve 1
osv
osv
CVE-2024-27322
2024-04-29 13:15:30
vulnrichment
vulnrichment
CVE-2024-27322
2024-04-29 13:02:37
amazon
amazon
Important: R
2024-06-19 18:46:00
openvas
openvas
Fedora: Security Advisory for R (FEDORA-2024-bc590cb3f1)
2024-05-27 00:00:00
Fedora: Security Advisory for R (FEDORA-2024-07b7b83a4f)
2024-05-27 00:00:00
nessus
nessus
Fedora 38 : R (2024-bc590cb3f1)
2024-05-09 00:00:00
Amazon Linux AMI : R (ALAS-2024-1940)
2024-06-24 00:00:00
Amazon Linux 2023 : libRmath, libRmath-devel, libRmath-static (ALAS2023-2024-638)
2024-06-10 00:00:00
cvelist
cvelist
CVE-2024-27322
2024-04-29 13:02:37
debiancve
debiancve
CVE-2024-27322
2024-04-29 13:15:30
nvd
nvd
CVE-2024-27322
2024-04-29 13:15:30
veracode
veracode
Arbitrary Code Execution
2024-05-05 14:38:36
fedora
fedora
[SECURITY] Fedora 38 Update: R-4.3.3-2.fc38
2024-05-09 01:49:21
[SECURITY] Fedora 39 Update: R-4.3.3-2.fc39
2024-05-09 02:05:27
thn
thn
New R Programming Vulnerability Exposes Projects to Supply Chain Attacks
2024-04-29 10:50:00
cert
cert
R Programming Language implementations are vulnerable to arbitrary code execution during deserialization of .rds and .rdx files
2024-04-29 00:00:00
cve
cve
CVE-2024-27322
2024-04-29 13:15:30

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON
Related for 4A1E2BAD-0836-11EF-9FD2-1C697A616631
osv1vulnrichment1amazon1openvas2nessus6cvelist1debiancve1nvd1veracode1fedora2thn1cert1cve1