← Back

CVE-2017-10906

nvd nist
Published: Dec 8, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Affected (13)

Fluentd
1 product
Fluentd
Redhat
1 product
Openstack
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Fluentd
Fluentd
Version 0.12.29
Fluentd
Version 0.12.30
Fluentd
Version 0.12.31
Fluentd
Version 0.12.32
Fluentd
Version 0.12.33
Fluentd
Version 0.12.34
Fluentd
Version 0.12.35
Fluentd
Version 0.12.36
Fluentd
Version 0.12.37
Fluentd
Version 0.12.38
Fluentd
Version 0.12.39
Fluentd
Version 0.12.40
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Openstack
Version 13

References (8)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Issue TrackingRelease NotesThird Party Advisory
Source: vultures@jpcert.or.jp
Issue TrackingPatchThird Party Advisory
Source: vultures@jpcert.or.jp
Issue TrackingThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingRelease NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party AdvisoryVDB Entry

Timeline

No history available yet.