Description
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | flightgear | 1:2016.4.3+dfsg-1 | — |
| Debian 12 | flightgear | 1:2016.4.3+dfsg-1 | — |
| Debian 8 | flightgear | 3.0.0-5+deb8u1 | DSA-3742-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | flightgear | 3.4.0-3ubuntu1.1 | USN-4588-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | FlightGear | 2020.3.11-1.3 | openSUSE-SU-2024:10595-1 |
Advisories 3
- DSA-3742-1 flightgear - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-4588-1 flightgear vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
- openSUSE-SU-2024:10595-1 FlightGear-2020.3.11-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- FEDORA-2016-a1f774c3d7 vendor-advisory
- https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/
- 94945 vdb-entry
- FEDORA-2016-01eba63bcc vendor-advisory
- [oss-security] 20161215 Re: CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list
- DSA-3742 vendor-advisory
- https://sourceforge.net/projects/flightgear/files/release-2016.4/
- [oss-security] 20161214 CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list
- [oss-security] 20161216 Re: CVE Request: FlightGear: Allows the route manager to overwrite arbitrary files mailing-list
- USN-4588-1 vendor-advisory