Skip to content
Noroxi

fail2ban records

9 published records for vendor fail2ban.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
88.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2021-32749
    33Monitor

    Possible RCE vulnerability in mailing action using mailutils (mail-whois)

    HighCVSS 8.1No exploitEPSS 4%

    fail2ban · fail2banJul 16, 2021

  • CVE-2012-5642
    31Monitor

    server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to tri

    HighCVSS 7.5No exploitEPSS 3%

    fail2ban · fail2banDec 31, 2012

  • CVE-2007-4321
    29Monitor

    fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny

    MediumCVSS 6.8Proof of conceptEPSS 6%

    fail2ban · fail2banAug 13, 2007

  • CVE-2013-7176
    21Monitor

    config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary

    MediumCVSS 5.0No exploitEPSS 3%

    fail2ban · fail2banFeb 1, 2014

  • CVE-2013-7177
    21Monitor

    config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arb

    MediumCVSS 5.0No exploitEPSS 3%

    fail2ban · fail2banFeb 1, 2014

  • CVE-2006-6302
    21Monitor

    fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.de

    MediumCVSS 5.0No exploitEPSS 2%

    fail2ban · fail2banDec 6, 2006

  • CVE-2013-2178
    21Monitor

    The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly va

    MediumCVSS 5.0No exploitEPSS 2%

    fail2ban · fail2banAug 28, 2013

  • CVE-2009-5023
    18Monitor

    The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8

    MediumCVSS 4.7No exploitEPSS 0%

    fail2ban · fail2banJun 10, 2014

  • CVE-2009-0362
    16Monitor

    filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a denial of service (force

    MediumCVSS 4.0No exploitEPSS 1%

    fail2ban · fail2banFeb 12, 2009