CVE-2013-7176

config/filter.d/postfix.conf in the postfix filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
fail2banfail2ban
𝑥
≤ 0.8.10
fail2banfail2ban
0.1.0
fail2banfail2ban
0.1.1
fail2banfail2ban
0.1.2
fail2banfail2ban
0.3.0
fail2banfail2ban
0.3.1
fail2banfail2ban
0.4.0
fail2banfail2ban
0.4.1
fail2banfail2ban
0.5.0
fail2banfail2ban
0.5.1
fail2banfail2ban
0.5.2
fail2banfail2ban
0.5.3
fail2banfail2ban
0.5.4
fail2banfail2ban
0.5.5
fail2banfail2ban
0.6.0
fail2banfail2ban
0.6.1
fail2banfail2ban
0.7.0
fail2banfail2ban
0.7.1
fail2banfail2ban
0.7.2
fail2banfail2ban
0.7.3
fail2banfail2ban
0.7.4
fail2banfail2ban
0.7.5
fail2banfail2ban
0.7.6
fail2banfail2ban
0.7.7
fail2banfail2ban
0.7.8
fail2banfail2ban
0.7.9
fail2banfail2ban
0.8.0
fail2banfail2ban
0.8.1
fail2banfail2ban
0.8.2
fail2banfail2ban
0.8.3
fail2banfail2ban
0.8.4
fail2banfail2ban
0.8.5
fail2banfail2ban
0.8.6
fail2banfail2ban
0.8.7
fail2banfail2ban
0.8.7.1
fail2banfail2ban
0.8.8
fail2banfail2ban
0.8.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
fail2ban
bullseye
0.11.2-2
fixed
bookworm
1.0.2-2
fixed
sid
1.1.0-7
fixed
trixie
1.1.0-7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
fail2ban
trusty
not-affected
saucy
ignored
quantal
ignored
precise
Fixed 0.8.6-3wheezy3build0.12.04.1
released
lucid
ignored