{"id":"CVE-2017-13709","aliases":["DEBIAN-CVE-2017-13709","EUVD-2017-5226","GHSA-v6cf-m8q2-vx93","MGASA-2017-0362","UBUNTU-CVE-2017-13709"],"status":"published","title":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to...","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01058,"percentile":0.64698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2017-08-27T16:00:00Z","modified":"2026-10-15T18:00:05Z","fixes":[{"ecosystem":"Debian:12","package":"flightgear","fixed_in":["1:2017.2.1+dfsg-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"flightgear","fixed_in":["1:2017.2.1+dfsg-4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"flightgear","fixed_in":["2017.3.1-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"flightgear-data","fixed_in":["2017.3.1-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"simgear","fixed_in":["2017.3.1-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"flightgear","fixed_in":["2017.3.1-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"flightgear-data","fixed_in":["2017.3.1-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"simgear","fixed_in":["2017.3.1-1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.2.1+dfsg-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2017.2.1+dfsg-4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"flightgear-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"simgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"flightgear-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"simgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.3.1-1.mga6"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4.0-1build1","3.4.0-2","3.4.0-3","3.4.0-3ubuntu1","3.4.0-3ubuntu1.1"]}],"products":[{"vendor":"flightgear","product":"flightgear"}],"references":[{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/2a5e3d06b2c0d9f831063afe7e7260bca456d679/","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/c7a2aef59979af3e9ff22daabb37bdaadb91cd75/","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13709"},{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/2a5e3d06b2c0d9f831063afe7e7260bca456d679"},{"url":"https://sourceforge.net/p/flightgear/flightgear/ci/c7a2aef59979af3e9ff22daabb37bdaadb91cd75"},{"url":"https://github.com/advisories/GHSA-v6cf-m8q2-vx93"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-13709","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0362.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21623","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2017/08/27/1","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/WUJXZ4XJWAFRNHBRBSX3GHY4VKXCJUQ7/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Y2V6NPR2KZKFONPHWPGYGEU4FLVNXCZZ/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-13709","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2017/08/27/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13709","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-13709","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:00:00Z","modified":"2024-08-05T19:05:19.881Z","updated_at":"2026-11-02T14:33:17.903346Z"}],"euvd":[{"id":"EUVD-2017-5226","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:00:00Z","modified":"2024-08-05T19:05:19Z","updated_at":"2026-11-03T02:23:19.185271Z"}],"ghsa":[{"id":"GHSA-v6cf-m8q2-vx93","title":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to...","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2022-05-17T01:17:01Z","modified":"2025-04-20T03:44:54Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:51.143792Z"}],"nvd":[{"id":"CVE-2017-13709","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:29:00.203Z","modified":"2026-06-17T01:05:01.817Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"CVE-2017-13709","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:29:00.203Z","modified":"2026-04-16T06:25:47.55326482Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-13709","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:29:00.203Z","modified":"2026-10-15T18:00:05.348183802Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-13709","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.","status":"published","published":"2017-08-27T16:29:00Z","modified":"2025-10-24T04:46:29Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"MGASA-2017-0362","title":"Updated flightgear packages fix security vulnerability","description":"In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger\nsubsystem allows one to overwrite any file via a resource that affects\nthe contents of the global Property Tree.\nMageia provides 2017.3.1 version as a security and bugfix update,\nallowing to connect to latest multiplayer servers.\n","status":"published","published":"2017-10-09T09:51:10Z","modified":"2026-04-16T06:22:50.526831689Z","updated_at":"2026-11-02T15:49:40.442238Z"}]}}