Fluentd up to 0.12.40 Termin UI Escape Sequence command injection

Summaryinfo

A vulnerability described as critical has been identified in Fluentd up to 0.12.40. Impacted is an unknown function of the component Termin UI. The manipulation as part of Escape Sequence results in command injection. This vulnerability is identified as CVE-2017-10906. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in Fluentd up to 0.12.40. It has been classified as critical. Affected is an unknown code block of the component Termin UI. The manipulation as part of a Escape Sequence leads to a command injection vulnerability. CWE is classifying the issue as CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

The bug was discovered 12/08/2017. The weakness was released 12/08/2017 (GitHub Repository). The advisory is available at github.com. This vulnerability is traded as CVE-2017-10906 since 07/04/2017. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1202 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 234431 (RHEL 7 : fluentd (RHSA-2018:2225)), which helps to determine the existence of the flaw in a target environment. The commercial vulnerability scanner Qualys is able to test this issue with plugin 236898 (Red Hat Update for fluentd (RHSA-2018:2225)).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (234431). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• Fluentd

Version

• 0.12.0
• 0.12.1
• 0.12.2
• 0.12.3
• 0.12.4
• 0.12.5
• 0.12.6
• 0.12.7
• 0.12.8
• 0.12.9
• 0.12.10
• 0.12.11
• 0.12.12
• 0.12.13
• 0.12.14
• 0.12.15
• 0.12.16
• 0.12.17
• 0.12.18
• 0.12.19
• 0.12.20
• 0.12.21
• 0.12.22
• 0.12.23
• 0.12.24
• 0.12.25
• 0.12.26
• 0.12.27
• 0.12.28
• 0.12.29
• 0.12.30
• 0.12.31
• 0.12.32
• 0.12.33
• 0.12.34
• 0.12.35
• 0.12.36
• 0.12.37
• 0.12.38
• 0.12.39
• 0.12.40

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion