CISA Activity - CERT/CC Reports R Programming Language Vulnerability

[CISA]

CERT Coordination Center (CERT/CC) has released information on a vulnerability in R programming language implementations (CVE-2024-27322). A cyber threat actor could exploit this vulnerability to take control of an affected system.

Users and administrators are encouraged to review the following advisories and apply the necessary updates:

• CERT/CC VU#23819
• Hidden Layer Blog: R-Bitrary Code Execution--Vulnerability in R’s Deserialization
• Comprehensive R Archive Network

Continue reading...