CVE-2017-10906

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-10906
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10906.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-10906
Aliases
Downstream
Published
2017-12-08T15:29:00Z
Modified
2026-10-20T10:47:42Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "13"
                        },
                        {
                            "last_affected": "13"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "redhat:openstack"
        }
    ]
}
References

Affected packages

Git / github.com/fluent/fluentd

Affected ranges

Type
GIT
Repo
https://github.com/fluent/fluentd
Events
Introduced
cd458194c949851a2b76c06b994330e964b55cc0
Last Affected
d5e0a61e06a7cfeb7266b018e77ac74f85c0c06d
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.29:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.29"
                },
                {
                    "last_affected": "0.12.29"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.30:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.30"
                },
                {
                    "last_affected": "0.12.30"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.31:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.31"
                },
                {
                    "last_affected": "0.12.31"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.32:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.32"
                },
                {
                    "last_affected": "0.12.32"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.33:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.33"
                },
                {
                    "last_affected": "0.12.33"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.34:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.34"
                },
                {
                    "last_affected": "0.12.34"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.35:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.35"
                },
                {
                    "last_affected": "0.12.35"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.36:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.36"
                },
                {
                    "last_affected": "0.12.36"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.37:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.37"
                },
                {
                    "last_affected": "0.12.37"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.38:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.38"
                },
                {
                    "last_affected": "0.12.38"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.39:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.39"
                },
                {
                    "last_affected": "0.12.39"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:fluentd:fluentd:0.12.40:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0.12.40"
                },
                {
                    "last_affected": "0.12.40"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

0.*
0.12.29
0.12.30
0.12.31
0.12.32
0.12.33
0.12.34
0.12.35
0.12.36
0.12.37
0.12.38
0.12.39
0.12.40
v0.*
v0.12.29
v0.12.30
v0.12.31
v0.12.32
v0.12.33
v0.12.34
v0.12.35
v0.12.36
v0.12.37
v0.12.38
v0.12.39
v0.12.40

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10906.json"