CVE-2025-45311: High severity fail2ban fail2ban-client vulnerability
Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is behaving in accordance with its intended privilege model.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-45311?
CVE-2025-45311 is classified as a high severity vulnerability due to the potential for attackers to perform arbitrary operations as root.
How do I fix CVE-2025-45311?
To fix CVE-2025-45311, ensure that the permissions for fail2ban-client are correctly configured to restrict access to authorized users only.
Who is impacted by CVE-2025-45311?
Users of fail2ban-client v0.11.2 with limited sudo privileges are particularly impacted by CVE-2025-45311.
What are the potential consequences of CVE-2025-45311?
The potential consequences of CVE-2025-45311 include unauthorized access to sensitive operations and system compromise.
Is CVE-2025-45311 being actively exploited?
As of now, there is no specific report indicating active exploitation of CVE-2025-45311, but it remains a serious security risk.