CVE-2016-9956: High severity Debian Debian Linux vulnerability
Published Feb 22, 2017
·Updated
Last updated 25 August 2025
Other sources
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
— Launchpad
Affected Software
5 affected componentsFixes available
Debian Debian Linux=8.0
Fedoraproject Fedora=24
Fedoraproject Fedora=25
FlightGear FlightGear<=2016.4.3
debian/flightgear
1:2020.3.6+dfsg-11:2020.3.6+dfsg-1+deb11u11:2020.3.16+dfsg-1+deb12u11:2020.3.19+dfsg-11:2024.1.5+dfsg-1
Remediation
Patch Available
Patch Available
Event History
Feb 22, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·04:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 19, 2026
Data Sourced
via Ubuntu·07:20 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·07:20 PM
Description
May 15, 2026
Data Sourced
via Debian·03:24 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9956?
CVE-2016-9956 is considered a high severity vulnerability because it allows remote attackers to write to arbitrary files.
2
How do I fix CVE-2016-9956?
To fix CVE-2016-9956, upgrade FlightGear to version 2016.4.4 or later.
3
Who is affected by CVE-2016-9956?
CVE-2016-9956 affects users of FlightGear versions prior to 2016.4.4.
4
What type of exploitation is possible with CVE-2016-9956?
CVE-2016-9956 allows exploitation through crafted Nasal scripts leading to arbitrary file write.
5
Which operating systems are impacted by CVE-2016-9956?
CVE-2016-9956 impacts various versions of Debian and Fedora that run vulnerable versions of FlightGear.