CVE:CVE-2017-10906
CNNVD:CNNVD-201707-096
Fluentd是一款在美国Cloud Native Computing基金会下托管的开源日志收集工具。
Fluentd 0.12.29版本至0.12.40版本中存在安全漏洞。攻击者可利用该漏洞更改终端用户界面或在设备上执行任意命令。
solution:Upgrade fluentd fluentd to a higher version than 0.12.29,0.12.30,0.12.31,0.12.32,0.12.33,0.12.34,0.12.35,0.12.36,0.12.37,0.12.38,0.12.39,0.12.40,and avoid the version 0.12.29,0.12.30,0.12.31,0.12.32,0.12.33,0.12.34,0.12.35,0.12.36,0.12.37,0.12.38,0.12.39,0.12.40; Upgrade redhat openstack to a higher version than 13,and avoid the version 13