vulnerability

Ubuntu: (CVE-2020-27637): r-base vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Jan 12, 2021

Added

Jun 26, 2025

Modified

Mar 27, 2026

Description

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages() function from the interpreter. Update to version 4.0.3

Solution

no-fix-ubuntu-package

References

CVE-2020-27637
https://attackerkb.com/topics/CVE-2020-27637
CWE-22
EUVD-EUVD-2020-20144
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20144
https://labs.bishopfox.com/advisories/cran-version-4.0.2
https://www.cve.org/CVERecord?id=CVE-2020-27637
https://www.r-project.org/foundation/

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report