PT-2013-3579 · Fail2Ban · Fail2Ban

Nbs System Security Team · Publicado 2013-07-01 · Atualizado 2024-06-15 · CVE-2013-2178

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Fail2ban versions prior to 0.8.10

Description The issue arises from improper validation of log messages in certain configuration files, allowing remote attackers to block arbitrary IP addresses by sending specific messages in a request.

Recommendations For versions prior to 0.8.10, update to version 0.8.10 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-2178

DSA-2708-1

MGASA-2013-0192

OPENSUSE-SU-2024:10347-1

Produtos afetados

Fail2Ban

Referências · 18

• http://lists.opensuse.org/opensuse-updates/2014-03/msg00021.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10347-1 · Aviso do Fabricante
• http://debian.org/security/2013/dsa-2708 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2178 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2013-0192.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2013-2178 · Nota
• https://osv.dev/vulnerability/MGASA-2013-0192 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-2178 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17338 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2178 · Nota de Segurança
• http://openwall.com/lists/oss-security/2013/06/13/7 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=10550 · Nota
• https://suse.com/security/cve/CVE-2013-7177 · Nota
• https://suse.com/security/cve/CVE-2013-7176 · Nota
• https://vndh.net/note:fail2ban-089-denial-service · Nota