VULNERABILITY INTELLIGENCE

CVE-2017-10906

CVSS score9.8 CRITICAL

EPSS probability4.58%

CISA KEVNot currently listed

Published2017-12-08

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Primary references

vultures@jpcert.or.jp — Third Party Advisory
vultures@jpcert.or.jp — Issue Tracking, Release Notes, Third Party Advisory
vultures@jpcert.or.jp — Issue Tracking, Patch, Third Party Advisory
vultures@jpcert.or.jp — Issue Tracking, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory, VDB Entry