CVE-2016-8714
Fixed in a distro release EPSS 2%CVSS 7.5
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.
Products: The R Project R
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | r-base | 3.3.3-1 |
| Debian 13 | r-base | 3.3.3-1 |
| Debian 14 | r-base | 3.3.3-1 |
| Debian 7 | r-base | 2.15.1-4+deb7u1 |
| Debian 8 | r-base | 3.1.1-1+deb8u1 |
| Ubuntu Pro 14.04 LTS | r-base | 3.0.2-1ubuntu1.1~esm2 |
| Ubuntu Pro 16.04 LTS | r-base | 3.2.3-4ubuntu0.1~esm3 |