Fail2ban
9 CVEs across 1 Fail2ban products. Browse Fail2ban vulnerabilities, severities, and proof-of-concept exploits.
Fail2ban products with known CVEs
Fail2ban CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-32749 | Medium | 6.1 | 2021-07-16 | fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, the… |
CVE-2009-5023 | | | 2014-06-10 | The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local use… |
CVE-2013-7177 | | | 2014-02-01 | config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address v… |
CVE-2013-7176 | | | 2014-02-01 | config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a c… |
CVE-2013-2178 | | | 2013-08-28 | The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages… |
CVE-2012-5642 | | | 2012-12-31 | server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavio… |
CVE-2009-0362 | | | 2009-02-13 | filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (forced authentication fa… |
CVE-2007-4321 | | | 2007-08-14 | fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a d… |
CVE-2006-6302 | | | 2006-12-06 | fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a… |