SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 68765: A security vulnerability occurs with the MIXED procedure under certain circumstances when a RANDOM or REPEATED statement is specified

DetailsHotfixAboutRate It

Severity: High

Description: PROC MIXED stops processing and generates traceback information with a segmentation violation. This issue occurs when a RANDOM statement or a REPEATED statement is specified and either of the following conditions is met:

  • There are no valid observations in the analysis data set.
  • The TYPE=LIN(12) option is specified in the RANDOM or REPEATED statement.

Potential Impact: The resulting segmentation violation introduces a potential security risk.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Hot fixes are provided for the SAS® 9.4M7 (TS1M7) release and for SAS® Viya® 3.5.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS/STATz/OS15.22021.1.29.4 TS1M7Viya
Microsoft® Windows® for x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows 8 Enterprise 32-bit15.29.4 TS1M7
Microsoft Windows 8 Enterprise x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows 8 Pro 32-bit15.29.4 TS1M7
Microsoft Windows 8 Pro x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows 8.1 Enterprise 32-bit15.29.4 TS1M7
Microsoft Windows 8.1 Enterprise x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows 8.1 Pro 32-bit15.29.4 TS1M7
Microsoft Windows 8.1 Pro x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows 1015.22021.1.29.4 TS1M7Viya
Microsoft Windows 1115.29.4 TS1M7
Microsoft Windows Server 200815.29.4 TS1M7
Microsoft Windows Server 2008 R215.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 2008 for x6415.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 2012 Datacenter15.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 2012 R2 Datacenter15.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 2012 R2 Std15.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 2012 Std15.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 201615.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 201915.22021.1.29.4 TS1M7Viya
Microsoft Windows Server 202215.29.4 TS1M7
Windows 7 Enterprise 32 bit15.29.4 TS1M7
Windows 7 Enterprise x6415.22021.1.29.4 TS1M7Viya
Windows 7 Home Premium 32 bit15.29.4 TS1M7
Windows 7 Home Premium x6415.22021.1.29.4 TS1M7Viya
Windows 7 Professional 32 bit15.29.4 TS1M7
Windows 7 Professional x6415.22021.1.29.4 TS1M7Viya
Windows 7 Ultimate 32 bit15.29.4 TS1M7
Windows 7 Ultimate x6415.22021.1.29.4 TS1M7Viya
64-bit Enabled AIX15.22021.1.29.4 TS1M7Viya
64-bit Enabled Solaris15.22021.1.29.4 TS1M7Viya
HP-UX IPF15.22021.1.29.4 TS1M7Viya
Linux for x6415.22021.1.29.4 TS1M7Viya
Solaris for x6415.22021.1.29.4 TS1M7Viya
SAS SystemSAS ViyaLinux for x64Viya
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.