Red Hat Security Advisory

RHSA-2018:2225

fluentd security update

Released 2018-07-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 Operational Tools for RHEL 7 fluentd-0.12.41-1.el7

Fixes 1 record

TI-2017-07995 CVE-2017-10906 · GHSA-5jrp-w8fr-mrww

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may…

MEDIUM 49

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04581 Published 2017-12-08 Partial fix · 0.12.41