{"id":"CVE-2016-9956","aliases":["DEBIAN-CVE-2016-9956","DSA-3742-1","EUVD-2016-10742","GHSA-gx42-hf7v-vhvg","MGASA-2017-0011","UBUNTU-CVE-2016-9956","USN-4588-1","openSUSE-SU-2024:10595-1"],"status":"published","title":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary...","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0324,"percentile":0.88367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-12-20T00:00:00Z","modified":"2026-10-15T18:00:05Z","fixes":[{"ecosystem":"Debian:12","package":"flightgear","fixed_in":["1:2016.4.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"flightgear","fixed_in":["1:2016.4.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"flightgear","fixed_in":["3.0.0-5+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"flightgear","fixed_in":["3.4.0-2.1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"flightgear","fixed_in":["3.4.0-3ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"FlightGear","fixed_in":["2020.3.11-1.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2016.4.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2016.4.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-5+deb8u1"}]}],"versions":["3.0.0-5"]},{"source":"osv","ecosystem":"Mageia:5","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2.1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-3ubuntu1.1"}]}],"versions":["3.4.0-1build1","3.4.0-2","3.4.0-3","3.4.0-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-3ubuntu1.1"}]}],"versions":["3.4.0-1build1","3.4.0-2","3.4.0-3","3.4.0-3ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"FlightGear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.3.11-1.3"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"flightgear","product":"flightgear"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB3B5XBB2NL2O2U4WNYGH7ZL45Q4UHGG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2/","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.securityfocus.com/bid/94945","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZKAN7V6UOHSRFWO567XMN4O6WXTSL32/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/15/10","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"http://www.debian.org/security/2016/dsa-3742","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://sourceforge.net/projects/flightgear/files/release-2016.4/","tags":["x_refsource_CONFIRM","x_transferred","Patch","Release Notes","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/14/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/16/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4588-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9956"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZKAN7V6UOHSRFWO567XMN4O6WXTSL32"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB3B5XBB2NL2O2U4WNYGH7ZL45Q4UHGG"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BZKAN7V6UOHSRFWO567XMN4O6WXTSL32"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DB3B5XBB2NL2O2U4WNYGH7ZL45Q4UHGG"},{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/280cd523686fbdb175d50417266d2487a8ce67d2"},{"url":"https://sourceforge.net/projects/flightgear/files/release-2016.4"},{"url":"https://usn.ubuntu.com/4588-1"},{"url":"https://github.com/advisories/GHSA-gx42-hf7v-vhvg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9956","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0011.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19948","tags":["report"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848114","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/12/15/10","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-9956","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4588-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9956","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9956","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-9956","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:00:00Z","modified":"2024-08-06T03:07:31.793Z","updated_at":"2026-11-02T14:33:32.103757Z"}],"euvd":[{"id":"EUVD-2016-10742","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:00:00Z","modified":"2024-08-06T03:07:31Z","updated_at":"2026-11-03T02:22:25.833438Z"}],"ghsa":[{"id":"GHSA-gx42-hf7v-vhvg","title":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary...","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2022-05-13T01:14:21Z","modified":"2025-04-20T03:34:26Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:01:41.934315Z"}],"nvd":[{"id":"CVE-2016-9956","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:59:00.49Z","modified":"2026-06-17T00:56:49.97Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-9956","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:59:00.49Z","modified":"2026-04-16T06:17:00.301259318Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9956","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:59:00.49Z","modified":"2026-10-15T18:00:05.358424828Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"UBUNTU-CVE-2016-9956","description":"The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.","status":"published","published":"2017-02-22T16:59:00Z","modified":"2026-02-04T02:37:06.667318Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DSA-3742-1","title":"flightgear - security update","status":"published","published":"2016-12-20T00:00:00Z","modified":"2026-03-09T01:18:23.602757Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0011","title":"Updated flightgear packages fix security vulnerability","description":"A security bug CVE-2016-9956 was found in all FlightGear versions since\n2009, that allow an attacker to overwrite any file the flightgear user\nowns. The Debian adaptation of upstream patch was applied to the Mageia\nFlightGear package.\n","status":"published","published":"2017-01-09T10:11:36Z","modified":"2026-04-16T06:24:27.651664404Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10595-1","title":"FlightGear-2020.3.11-1.3 on GA media","description":"These are all security issues fixed in the FlightGear-2020.3.11-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:35:42.834458Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"USN-4588-1","title":"flightgear vulnerability","description":"It was discovered that FlightGear could write arbitrary files if received a\nspecial nasal script. A remote attacker could exploit this with a crafted\nfile to execute arbitrary code.\n","status":"published","published":"2020-10-19T20:46:35Z","modified":"2026-02-10T04:41:57Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}