CVE catalog

CVE-2017-13709

flightgear: CVE-2017-13709

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.06% · Oct 25, 2026

In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianflightgearsid1:2024.1.5+dfsg-1fixed
Debianflightgeartrixie1:2020.3.19+dfsg-1fixed
Debianflightgearbookworm1:2020.3.16+dfsg-1+deb12u1fixed
Ubuntuflightgear16.043.4.0-1build1vulnerable
Ubuntuflightgear16.043.4.0-2vulnerable
Ubuntuflightgear16.043.4.0-3vulnerable
Ubuntuflightgear16.043.4.0-3ubuntu1vulnerable
Ubuntuflightgear16.043.4.0-3ubuntu1.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianflightgearsourcesid1:2017.2.1+dfsg-4lowNot reported[873439]
Debianflightgearsourcetrixie1:2017.2.1+dfsg-4lowNot reported[873439]
Debianflightgearsourcebookworm1:2017.2.1+dfsg-4lowNot reported[873439]

[Debian bug #873439]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [flightgear]Fixed
    Details (2)

    • 1:2020.3.16+dfsg-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:2017.2.1+dfsg-4

      dsa · flightgear · debian · bookworm

    • 1:2020.3.16+dfsg-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:2017.2.1+dfsg-4

      dsa · flightgear · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]