CVE-2017-10906

Critical

Published: 08/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-10906 describes an escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40. This may allow an attacker to change the terminal UI or execute arbitrary commands on the device.

Risk Assessment

This vulnerability poses a risk to organizations by allowing attackers to manipulate the terminal interface and potentially execute malicious code on devices.

Recommendation

It is recommended to update Fluentd to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.