TI-2021-12417 CVE-2021-32749
Possible RCE vulnerability in mailing action using mailutils (mail-whois)
Priority MEDIUM 41
fail2ban is a daemon to ban hosts that cause multiple authentication errors.
fail2ban
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
fail2ban records in CISA KEVNo fail2ban vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2007-04181 CVE-2007-4321 · GHSA-5jfx-9p58-q8pj
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote…
Priority LOW 39
fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd…
TI-2012-04743 CVE-2012-5642 · GHSA-mxxq-p5rj-2jcc
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the…
Priority LOW 38
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this con…
Priority LOW 30
In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address.
TI-2013-05868 CVE-2013-7177 · GHSA-9rh6-j3cg-gfgj
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows…
Priority LOW 29
config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly design…
TI-2013-05867 CVE-2013-7176 · GHSA-c3p6-cwjh-4h46
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows…
Priority LOW 29
config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed reg…
TI-2013-01945 CVE-2013-2178 · GHSA-4339-77hj-xqhj
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf…
Priority LOW 26
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP address…
TI-2006-06066 CVE-2006-6302 · GHSA-j744-4wh9-3vxg
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote…
Priority LOW 26
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the ss…
TI-2009-04779 CVE-2009-5023 · GHSA-h7g6-frrr-69cx
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4)…
Priority LOW 22
The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on tempor…
TI-2009-00342 CVE-2009-0362 · GHSA-rc77-w9xr-6vvf
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows…
Priority LOW 21
filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication failures) via a crafted reverse-resolved DNS name (rhost) entry…