CVE-2017-10906

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
References
Link Resource
https://jvn.jp/en/vu/JVNVU95124098/index.html Issue Tracking Third Party Advisory VDB Entry
https://github.com/fluent/fluentd/pull/1733 Issue Tracking Patch Third Party Advisory
https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes Issue Tracking Release Notes Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2225 Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fluentd:fluentd:0.12.31:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.33:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.40:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.35:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.36:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.37:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.38:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.29:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.30:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.32:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.34:*:*:*:*:*:*:*
cpe:2.3:a:fluentd:fluentd:0.12.39:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*

Information

Published : 2017-12-08 07:29

Updated : 2021-08-04 10:14


NVD link : CVE-2017-10906

Mitre link : CVE-2017-10906


JSON object : View

Advertisement

dedicated server usa

Products Affected

fluentd

  • fluentd

redhat

  • openstack