An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4799-1 advisory.

    It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use     this to cause a denial of service or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to 3.3.3. Fix CVE-2016-8714.

----

Rebuilt for fc26

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 3.3.3. Fix CVE-2016-8714.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Cory Duplantis discovered a buffer overflow in the R programming language. A malformed encoding file may lead to the execution of arbitrary code during PDF generation.

An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.

For Debian 7 'Wheezy', this problem has been fixed in version 2.15.1-4+deb7u1.

We recommend that you upgrade your r-base packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183554	Ubuntu 16.04 ESM : R vulnerability (USN-4799-1)	Nessus	Ubuntu Local Security Checks	high
101565	Fedora 26 : R / rkward / rpy (2017-07c8f3ea2b)	Nessus	Fedora Local Security Checks	high
97870	Fedora 24 : R / rkward / rpy (2017-da9d0f0dc0)	Nessus	Fedora Local Security Checks	high
97841	Fedora 25 : R / rkward / rpy (2017-ae18216e75)	Nessus	Fedora Local Security Checks	high
97802	Debian DSA-3813-1 : r-base - security update	Nessus	Debian Local Security Checks	high
97798	Debian DLA-861-1 : r-base security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-8714

high

Tenable Plugins

high

high

high

high

high

high