CVE-2017-10906

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
fluentdfluentd
0.12.29
fluentdfluentd
0.12.30
fluentdfluentd
0.12.31
fluentdfluentd
0.12.32
fluentdfluentd
0.12.33
fluentdfluentd
0.12.34
fluentdfluentd
0.12.35
fluentdfluentd
0.12.36
fluentdfluentd
0.12.37
fluentdfluentd
0.12.38
fluentdfluentd
0.12.39
fluentdfluentd
0.12.40
𝑥
= Vulnerable software versions