fail2ban

9 results · Feed

• Medium 5.3
  CVE-2026-109786

  In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" su…

  fail2ban fail2ban fail2ban fail2ban Debian Ubuntu
  Oct 13, 2026
• Medium 6.1
  CVE-2021-32749

  Possible RCE vulnerability in mailing action using mailutils (mail-whois)

  fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois.…

  fail2ban fail2ban fail2ban fail2ban Debian Ubuntu Alpine
  Jul 16, 2021
• Unscored —
  CVE-2009-5023

  The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ i…

  fail2ban Debian
  Jun 10, 2014
• Unscored —
  CVE-2013-7176

  config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blo…

  fail2ban Debian
  Feb 1, 2014
• Unscored —
  CVE-2013-7177

  config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger t…

  fail2ban Debian
  Feb 1, 2014
• Unscored —
  CVE-2013-2178

  The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.…

  fail2ban Debian
  Aug 28, 2013
• Unscored —
  CVE-2012-5642

  server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow re…

  fail2ban Debian
  Dec 31, 2012
• Unscored —
  CVE-2009-0362

  filter.d/wuftpd.conf in Fail2ban 0.8.3 uses an incorrect regular expression that allows remote attackers to cause a den…

  fail2ban Debian
  Feb 13, 2009
• Unscored —
  CVE-2007-4321 Public exploit

  fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts t…

  fail2ban Debian
  Aug 14, 2007