MGASA-2013-0192

    Dashboard / Vulnerabilities / MGASA-2013-0192

    MGASA-2013-0192

    Published: 1 Jul 2013Last Modified: 16 Apr 2026
    Upstream:
    CVE-2013-2178

    Summary: Updated fail2ban packages fix CVE-2013-2178

    Details: Krzysztof Katowicz-Kowalewski discovered a vulnerability in Fail2ban, a log monitoring and system which can act on attack by preventing hosts to connect to specified services using the local firewall. When using Fail2ban to monitor Apache logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses, thus causing a denial of service (CVE-2013-2178).

    References: https://advisories.mageia.org/MGASA-2013-0192.html, https://vndh.net/note:fail2ban-089-denial-service, http://www.debian.org/security/2013/dsa-2708, https://bugs.mageia.org/show_bug.cgi?id=10550

    Affected packages

    Package

    Name: fail2ban

    Purl: pkg:rpm/mageia/fail2ban?arch=source&distro=mageia-2

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.8.6-3.2.mga2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    MGASA-2013-0192 | CVE-DB