Unrated

Incorrect Authorization in SimGear

CVE-2025-0781 First seen on SecPulse Jan 29, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2025-0781 flightgear Fixed in: 1:2020.3.6+dfsg-1+deb11u1
Ubuntu UBUNTU-CVE-2025-0781 simgear Fixed in: 3.4.0-3ubuntu0.1~esm1

Original description The description as published by the source.

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch gitlab.com
patch gitlab.com
report gitlab.com
web lists.debian.org
web lists.debian.org

Key facts

Severity: Unrated
Published: Jan 29, 2025
First seen on SecPulse: Jan 29, 2025
CWE: CWE-863

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)01:17