https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:52:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03927 bdu:2021-03927 https://cve.radiocsirt.org/vuln/bdu:2021-03927 https://cve.radiocsirt.org/vuln/euvd-2026-28102 EUVD-2026-28102 https://cve.radiocsirt.org/vuln/euvd-2026-28102 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32749 <p>fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in &#34;foreign&#34; input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.</p> <p>fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in &#34;foreign&#34; input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-32749 https://cve.radiocsirt.org/vuln/gsd-2021-32749 gsd-2021-32749 https://cve.radiocsirt.org/vuln/gsd-2021-32749 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1274-1 <p>Security update for fail2ban</p> <p>Security update for fail2ban</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1274-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32749 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: fail2ban, Ubuntu:Pro:16.04:LTS: fail2ban, Ubuntu:Pro:18.04:LTS: fail2ban, Ubuntu:Pro:20.04:LTS: fail2ban</p> <p>fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in &#34;foreign&#34; input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: fail2ban, Ubuntu:Pro:16.04:LTS: fail2ban, Ubuntu:Pro:18.04:LTS: fail2ban, Ubuntu:Pro:20.04:LTS: fail2ban</p> <p>fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in &#34;foreign&#34; input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32749