CVE-2017-10906

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
fluentdfluentd
0.12.29
fluentdfluentd
0.12.30
fluentdfluentd
0.12.31
fluentdfluentd
0.12.32
fluentdfluentd
0.12.33
fluentdfluentd
0.12.34
fluentdfluentd
0.12.35
fluentdfluentd
0.12.36
fluentdfluentd
0.12.37
fluentdfluentd
0.12.38
fluentdfluentd
0.12.39
fluentdfluentd
0.12.40
𝑥
= Vulnerable software versions