Lucene search

CVE-2017-10906

🗓️ 08 Dec 2017 15:00:00Reported by jpcertType

Escape sequence injection in Fluentd 0.12.29-0.12.4

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	RHEL 8 : fluentd (Unpatched Vulnerability)	11 May 202400:00	–	nessus
OSV	Red Hat Security Advisory: fluentd security update	13 Sep 202413:41	–	osv
OSV	Fluentd Escape Sequence Injection Vulnerability	13 May 202201:07	–	osv
OSV	CVE-2017-10906	8 Dec 201715:29	–	osv
RedhatCVE	CVE-2017-10906	12 Dec 201704:19	–	redhatcve
NVD	CVE-2017-10906	8 Dec 201715:29	–	nvd
CVE	CVE-2017-10906	8 Dec 201715:29	–	cve
Veracode	Escape Sequence Injection	10 Dec 201722:32	–	veracode
Veracode	Escape Sequence Injection	15 Jan 201909:24	–	veracode
RedHat Linux	(RHSA-2018:2225) Moderate: fluentd security update	19 Jul 201813:40	–	redhat

[
  {
    "product": "Fluentd",
    "vendor": "Cloud Native Computing Foundation (CNCF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.12.29 through 0.12.40"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU95124098/index.html
access	www.access.redhat.com/errata/RHSA-2018:2225
github	www.github.com/fluent/fluentd/pull/1733
github	www.github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2017 15:00Current

9.7High risk

Vulners AI Score9.7

EPSS0.002