Approved changes feed: RSS · Atom
cpe:2.3:a:fail2ban:fail2ban:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Fail2Ban (6ec33ae9-d206-5889-97a8-dd2a39d6492e) |
|---|---|
| Product | Fail2Ban (5ceccbab-7a7f-599d-a89e-34c2c77cf61e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fail2ban/fail2ban |
purl2cpe | 2026-06-01 10:12:09.844100 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32749 |
vulnerable | 2026-06-08 05:32:07.946695 |
Possible RCE vulnerability in mailing action using mailutils (mail-whois)
MEDIUM (6.1)
fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in "foreign" input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.
Published: 2021-07-16T00:00:00.000Z
Updated: 2024-08-03T23:33:54.871Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7177 |
vulnerable | 2026-06-08 05:05:08.571199 |
Details available
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Published: 2014-02-01T15:00:00.000Z
Updated: 2024-08-06T18:01:19.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7176 |
vulnerable | 2026-06-08 05:05:08.551693 |
Details available
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
Published: 2014-02-01T15:00:00.000Z
Updated: 2024-08-06T18:01:20.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2178 |
vulnerable | 2026-06-08 05:03:58.869047 |
Details available
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
Published: 2013-08-28T17:18:00.000Z
Updated: 2024-08-06T15:27:41.112Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5642 |
vulnerable | 2026-06-08 05:02:57.673290 |
Details available
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.
Published: 2012-12-31T11:00:00.000Z
Updated: 2024-08-06T21:14:16.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5023 |
vulnerable | 2026-06-08 04:51:50.783965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-6302 |
vulnerable | 2026-06-08 04:49:28.618586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.