Denial of Service Vulnerability in Fail2ban by Fail2ban Inc.
CVE-2013-2178
Currently unrated
What is CVE-2013-2178?
In Fail2ban version 0.8.9 and earlier, the apache configuration files – apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf – fail to properly validate log messages. This lack of validation permits remote attackers to exploit the system by sending specifically crafted log messages, which can lead to unauthorized blocking of arbitrary IP addresses. This vulnerability poses a significant risk as it can disrupt service availability by preventing legitimate users from accessing the network.