VYPR
Unrated severityNVD Advisory· Published Dec 31, 2012· Updated Apr 29, 2026

CVE-2012-5642

CVE-2012-5642

Description

server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to trigger unsafe behavior in a custom action file via unspecified symbols in this content.

Affected products

34
  • Fail2ban/Fail2ban34 versions
    cpe:2.3:a:fail2ban:fail2ban:*:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:a:fail2ban:fail2ban:*:*:*:*:*:*:*:*range: <=0.8.7.1
    • cpe:2.3:a:fail2ban:fail2ban:0.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.8:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.7.9:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:fail2ban:fail2ban:0.8.7:*:*:*:*:*:*:*

Patches

1

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

9

News mentions

0

No linked articles in our index yet.