Vulnerability in Fail2ban

CVE-2012-5642

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.

EPSS: 0.031 (86.5th percentile) — read the EPSS interpretation.

Affected products

  • Fail2ban — versions 0.1.0, 0.1.1, 0.1.2
  • N/a — versions n/a

References