CVE-2016-9956: Debian Linux

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.

Affected products

• Debian Debian Linux: version 8.0 only
• Fedoraproject Fedora: version 24 only; version 25 only
• Flightgear Flightgear: up to and including 2016.4.3

Published 2017-02-22. Last modified 2026-06-17.