CVE-2013-2178: Input Validation
Published Aug 28, 2013
·Updated
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
Affected Software
36 affected components
fail2ban fail2ban<=0.8.9
fail2ban fail2ban=0.1.0
fail2ban fail2ban=0.1.1
fail2ban fail2ban=0.1.2
fail2ban fail2ban=0.3.0
fail2ban fail2ban=0.3.1
fail2ban fail2ban=0.4.0
fail2ban fail2ban=0.4.1
fail2ban fail2ban=0.5.0
fail2ban fail2ban=0.5.1
fail2ban fail2ban=0.5.2
fail2ban fail2ban=0.5.3
fail2ban fail2ban=0.5.4
fail2ban fail2ban=0.5.5
fail2ban fail2ban=0.6.0
fail2ban fail2ban=0.6.1
fail2ban fail2ban=0.7.0
fail2ban fail2ban=0.7.1
fail2ban fail2ban=0.7.2
fail2ban fail2ban=0.7.3
fail2ban fail2ban=0.7.4
fail2ban fail2ban=0.7.5
fail2ban fail2ban=0.7.6
fail2ban fail2ban=0.7.7
fail2ban fail2ban=0.7.8
fail2ban fail2ban=0.7.9
fail2ban fail2ban=0.8.0
fail2ban fail2ban=0.8.1
fail2ban fail2ban=0.8.2
fail2ban fail2ban=0.8.3
fail2ban fail2ban=0.8.4
fail2ban fail2ban=0.8.5
fail2ban fail2ban=0.8.6
fail2ban fail2ban=0.8.7
fail2ban fail2ban=0.8.7.1
fail2ban fail2ban=0.8.8
Event History
Aug 28, 2013
CVE Published
via MITRE·05:18 PM
Data Sourced
via MITRE·05:18 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2178?
CVE-2013-2178 is considered a medium severity vulnerability.
2
How do I fix CVE-2013-2178?
To fix CVE-2013-2178, upgrade Fail2ban to version 0.8.10 or later.
3
What systems are affected by CVE-2013-2178?
CVE-2013-2178 affects Fail2ban versions prior to 0.8.10.
4
What type of attack does CVE-2013-2178 enable?
CVE-2013-2178 allows remote attackers to block arbitrary IP addresses through malformed log messages.
5
Is CVE-2013-2178 exploitable remotely?
Yes, CVE-2013-2178 is exploitable by remote attackers.