VDB

GCVE-110-MAGEIA-2014-176

GCVE-110-MAGEIA-2014-176
Advisory Published
Vulnetix · Advisory published April 16, 2014
An update to fail2ban 0.8.13 has been released to fix security issues, amongst other bugfixes. fail2ban versions prior to 0.8.11 would allow a remote unauthenticated attacker to cause arbitrary IP addresses to be blocked by Fail2ban causing legitimate users to be blocked from accessing services protected by Fail2ban. These services are cyrus-imap (CVE-2013-7177) and postfix (CVE-2013-7176).

Affected Products

VendorProductVersionsPlatforms
Mageiafail2ban0.8.13-2.mga4 (unaffected), 0 (affected), 0 (affected), 0.8.13-2.mga4 (unaffected)—
Mageiafail2ban0.8.13-2.mga3 (unaffected), 0 (affected), 0 (affected), 0.8.13-2.mga3 (unaffected)—
Mageiakmod-vboxadditions0 (affected), 4.3.16-1.mga4 (unaffected)—
Mageiakmod-vboxadditions0 (affected), 4.3.16-1.mga3 (unaffected)—
Mageiakmod-virtualbox0 (affected), 4.3.16-1.mga4 (unaffected)—
Mageiavirtualbox0 (affected), 4.3.16-1.mga4 (unaffected)—
Mageiavirtualbox4.3.16-1.mga3 (unaffected), 0 (affected)—
Mageiakmod-virtualbox0 (affected), 4.3.16-1.mga3 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›