CVE-2013-2178
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files...
CVE-2013-2178 is a medium vulnerability (CVSS 5.0) in Fail2ban, published June 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in fail2ban 0.8.10-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.76%EPSS, 78th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.8.10-1fail2ban +7 more
Description
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
fail2banDebian:12 | before 0.8.10-1 | 0.8.10-1 |
fail2banDebian:13 | before 0.8.10-1 | 0.8.10-1 |
fail2banDebian:14 | before 0.8.10-1 | 0.8.10-1 |
fail2banDebian:6.0 | before 0.8.4-3+squeeze2, plus listed versions 0.8.4-30.8.4-3+squeeze1 | 0.8.4-3+squeeze2 |
fail2banDebian:7 | before 0.8.6-3wheezy2, plus listed versions 0.8.6-3wheezy1 | 0.8.6-3wheezy2 |
fail2banMageia:2 | before 0.8.6-3.2.mga2 | 0.8.6-3.2.mga2 |
fail2banMageia:3 | before 0.8.8-6.1.mga3 | 0.8.8-6.1.mga3 |
fail2banopenSUSE:Tumbleweed From an advisory covering 4 CVEs | before 0.9.5-1.1 | 0.9.5-1.1 |
What each source reports
NVD Score used
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
CVE-2013-2178- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
CVE-2013-2178- Updated
- 2026-11-02
EUVDEUVD-2013-2137No score
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
EUVD-2013-2137- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4339-77hj-xqhjNo score
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files...
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
GHSA-4339-77hj-xqhj- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
CVE-2013-2178- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2178No score
The apache-auth.conf, apache-nohome.conf, apache-noscript.conf, and apache-overflows.conf files in Fail2ban before 0.8.10 do not properly validate log messages, which allows remote attackers to block arbitrary IP addresses via certain messages in a request.
- Record
DEBIAN-CVE-2013-2178- Updated
- 2026-11-02
OSVMGASA-2013-0192No score
Updated fail2ban packages fix CVE-2013-2178
Krzysztof Katowicz-Kowalewski discovered a vulnerability in Fail2ban, a log monitoring and system which can act on attack by preventing hosts to connect to specified services using the local firewall.
When using Fail2ban to monitor Apache logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses, thus causing a denial of service (CVE-2013-2178).
- Record
MGASA-2013-0192- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10347-1No score
SuSEfirewall2-fail2ban-0.9.5-1.1 on GA media
These are all security issues fixed in the SuSEfirewall2-fail2ban-0.9.5-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10347-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17338
openwall.com/lists/oss-security/2013/06/13/7
debian.org/security/2013/dsa-2708
lists.opensuse.org/opensuse-updates/2014-03/msg00021.html
raw.github.com/fail2ban/fail2ban/master/ChangeLog
vndh.net/note:fail2ban-089-denial-service
Show 9 moreShow less
nvd.nist.gov/vuln/detail/CVE-2013-2178
github.com/advisories/GHSA-4339-77hj-xqhj
security-tracker.debian.org/tracker/CVE-2013-2178
advisories.mageia.org/MGASA-2013-0192.html
bugs.mageia.org/show_bug.cgi?id=10550
suse.com/security/cve/CVE-2009-5023