CVE-2012-5642 — Fail2ban vulnerability
5 documents5 sources
Severity
7.5HIGHNVD
EPSS
1.6%
top 17.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 31
Latest updateMay 17
Description
server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages3 packages
Patches
🔴Vulnerability Details
2📋Vendor Advisories
1Debian▶
CVE-2012-5642: fail2ban - server/action.py in Fail2ban before 0.8.8 does not properly handle the content o...↗2012