CVE-2013-7177

config/filter.d/cyrus-imap.conf in the cyrus-imap filter in Fail2ban before 0.8.11 allows remote attackers to trigger the blocking of an arbitrary IP address via a crafted e-mail address that matches an improperly designed regular expression.

Published: Feb 1, 2014
Updated: Nov 9, 2025
CVE: CVE-2013-7177
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
fail2ban / fail2ban	0.4.1	0.4.1.x
fail2ban / fail2ban	0.7.4	0.7.4.x
fail2ban / fail2ban	0.7.2	0.7.2.x
fail2ban / fail2ban	0.1.2	0.1.2.x
fail2ban / fail2ban	0.5.0	0.5.0.x
fail2ban / fail2ban	0.7.5	0.7.5.x
fail2ban / fail2ban	-	0.8.10.x
fail2ban / fail2ban	0.8.6	0.8.6.x
fail2ban / fail2ban	0.7.9	0.7.9.x
fail2ban / fail2ban	0.7.1	0.7.1.x
fail2ban / fail2ban	0.8.8	0.8.8.x
fail2ban / fail2ban	0.8.7	0.8.7.x
fail2ban / fail2ban	0.7.8	0.7.8.x
fail2ban / fail2ban	0.5.2	0.5.2.x
fail2ban / fail2ban	0.7.7	0.7.7.x
fail2ban / fail2ban	0.8.7.1	0.8.7.1.x
fail2ban / fail2ban	0.8.2	0.8.2.x
fail2ban / fail2ban	0.4.0	0.4.0.x
fail2ban / fail2ban	0.5.1	0.5.1.x
fail2ban / fail2ban	0.8.1	0.8.1.x
fail2ban / fail2ban	0.5.3	0.5.3.x
fail2ban / fail2ban	0.3.1	0.3.1.x
fail2ban / fail2ban	0.8.4	0.8.4.x
fail2ban / fail2ban	0.8.0	0.8.0.x
fail2ban / fail2ban	0.5.4	0.5.4.x
fail2ban / fail2ban	0.8.5	0.8.5.x
fail2ban / fail2ban	0.6.0	0.6.0.x
fail2ban / fail2ban	0.5.5	0.5.5.x
fail2ban / fail2ban	0.6.1	0.6.1.x
fail2ban / fail2ban	0.7.3	0.7.3.x
fail2ban / fail2ban	0.7.0	0.7.0.x
fail2ban / fail2ban	0.8.9	0.8.9.x
fail2ban / fail2ban	0.1.0	0.1.0.x
fail2ban / fail2ban	0.8.3	0.8.3.x
fail2ban / fail2ban	0.3.0	0.3.0.x
fail2ban / fail2ban	0.1.1	0.1.1.x
fail2ban / fail2ban	0.7.6	0.7.6.x

Vulnerability Database

322,935

CVE-2013-7177

Deep Security Visibility Without the Complexity