Possible RCE in Fail2Ban Stack

[dcbrown73]

I know a lot of you guys use Fail2Ban here. I just wanted to make you guys aware of an RCE (Remote Code Execution) bug that came out not long ago if you weren't already aware.

You can see more here at the fail2ban Github repo.

Patch up!

 

[f33dm3bits]

Yes I am aware of that, I switched over all my jails from banning and mailing to just banning so the mail command/action is never used when banning an ip.

1983224 – CVE-2021-32749 fail2ban: Command injection via mail comand [epel-all]

bugzilla.redhat.com

NVD - CVE-2021-32749

nvd.nist.gov