{"id":"MGASA-2013-0164","aliases":[],"status":"published","title":"Updated flightgear package fixes security vulnerability","description":"It was reported that FlightGear suffers from improper handling of format\nstrings when FlightGear is started with allowances for remote access (via\nthe --props or --telnet commandline arguments).  If a remote attacker were\nable to connect to FlightGear and set special parameters related with clouds,\nit could cause FlightGear to crash.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-06-06T12:24:33Z","modified":"2026-04-16T04:28:22Z","fixes":[{"ecosystem":"Mageia:2","package":"flightgear","fixed_in":["2.6.0-2.3.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"flightgear","fixed_in":["2.10.0-1.3.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:2","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-2.3.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"flightgear","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.0-1.3.mga3"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2013-0164.html","tags":["advisory"]},{"url":"http://kuronosec.blogspot.ca/2013/04/flightgear-remote-format-string.html","tags":["web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106922.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=10351","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2013-0164","title":"Updated flightgear package fixes security vulnerability","description":"It was reported that FlightGear suffers from improper handling of format\nstrings when FlightGear is started with allowances for remote access (via\nthe --props or --telnet commandline arguments).  If a remote attacker were\nable to connect to FlightGear and set special parameters related with clouds,\nit could cause FlightGear to crash.\n","status":"published","published":"2013-06-06T12:24:33Z","modified":"2026-04-16T04:28:22.540794Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}