CVE-2025-0781
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | flightgear, simgear | 1:2020.3.6+dfsg-1+deb11u1 |
| debian 12 | flightgear, simgear | 1:2020.3.16+dfsg-1+deb12u1 |
| debian 13 | flightgear, simgear | 1:2020.3.19+dfsg-1 |
| debian 14 | simgear | 1:2020.3.19+dfsg-1 |
| echo | flightgear, simgear | 1:2020.3.16+dfsg-1+deb12u1 |
| rapidfort debian 12 | flightgear, simgear | 1:2020.3.19+dfsg-1 |
| rapidfort debian 13 | flightgear, simgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 20.04 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 22.04 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 24.04 | flightgear | 1:2020.3.19+dfsg-1 |
| ubuntu 16.04-ESM | simgear | 3.4.0-3ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | flightgear, simgear | 1:2018.1.1+dfsg-1ubuntu0.1~esm1 |
15 kaynaktaki 25 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | flightgear | 1:2020.3.6+dfsg-1+deb11u1 |
| debian 11 | simgear | 1:2020.3.6+dfsg-1+deb11u1 |
| debian 12 | flightgear | 1:2020.3.16+dfsg-1+deb12u1 |
| debian 12 | simgear | 1:2020.3.16+dfsg-1+deb12u1 |
| debian 13 | flightgear | 1:2020.3.19+dfsg-1 |
| debian 13 | simgear | 1:2020.3.19+dfsg-1 |
| debian 14 | simgear | 1:2020.3.19+dfsg-1 |
| echo | flightgear | 1:2020.3.16+dfsg-1+deb12u1 |
| echo | simgear | 1:2020.3.16+dfsg-1+deb12u1 |
| rapidfort debian 12 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort debian 12 | simgear | 1:2020.3.19+dfsg-1 |
| rapidfort debian 13 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort debian 13 | simgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 20.04 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 22.04 | flightgear | 1:2020.3.19+dfsg-1 |
| rapidfort ubuntu 24.04 | flightgear | 1:2020.3.19+dfsg-1 |
| ubuntu 16.04-ESM | simgear | 3.4.0-3ubuntu0.1~esm1 |
| ubuntu 18.04-ESM | flightgear | düzeltme belirtilmemiş |
| ubuntu 18.04-ESM | simgear | 1:2018.1.1+dfsg-1ubuntu0.1~esm1 |
| ubuntu 20.04-ESM | flightgear | düzeltme belirtilmemiş |
| ubuntu 20.04-ESM | simgear | 1:2019.1.1+dfsg-3ubuntu0.1~esm1 |
| ubuntu 22.04 | flightgear | düzeltme belirtilmemiş |
| ubuntu 22.04 | simgear | düzeltme belirtilmemiş |
| ubuntu 24.04 | flightgear | düzeltme belirtilmemiş |
| ubuntu 24.04 | simgear | düzeltme belirtilmemiş |
Referanslar
- https://gitlab.com/flightgear/flightgear/-/commit/ad37afce28083fad7f79467b3ffdead753584358
- https://gitlab.com/flightgear/flightgear/-/issues/3025
- https://gitlab.com/flightgear/simgear/-/commit/5bb023647114267141a7610e8f1ca7d6f4f5a5a8
- https://lists.debian.org/debian-lts-announce/2025/01/msg00028.html
- https://lists.debian.org/debian-lts-announce/2025/01/msg00029.html
- https://ubuntu.com/security/notices/USN-7965-1
- https://www.cve.org/CVERecord?id=CVE-2025-0781