CVE-2017-10906

2017-12-0815:00:00

jpcert

www.cve.org

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

CNA Affected

[
  {
    "product": "Fluentd",
    "vendor": "Cloud Native Computing Foundation (CNCF)",
    "versions": [
      {
        "status": "affected",
        "version": "0.12.29 through 0.12.40"
      }
    ]
  }
]