CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Published: Jul 12, 2021
Updated: May 9, 2024
CVE: CVE-2021-30129
GHSA: GHSA-9279-7hph-r3xw
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

CWE-772

Affected Software
References

Software	From	Fixed in
apache / sshd	2.0.0	2.7.0
oracle / retail_customer_management_and_segmentation_foundation	18.0	18.0.x
oracle / flexcube_universal_banking	14.0.0	14.3.0.x
oracle / retail_customer_management_and_segmentation_foundation	19.0	19.0.x
oracle / middleware_common_libraries_and_tools	12.2.1.4.0	12.2.1.4.0.x
oracle / communications_cloud_native_core_console	1.9.0	1.9.0.x
oracle / banking_payments	14.5	14.5.x
oracle / banking_trade_finance	14.5	14.5.x
oracle / banking_treasury_management	14.5	14.5.x
oracle / oss_support_tools	2.12.42	2.12.42.x
oracle / flexcube_universal_banking	14.5	14.5.x
oracle / middleware_common_libraries_and_tools	14.1.1.0.0	14.1.1.0.0.x
oracle / middleware_common_libraries_and_tools	12.2.1.3.0	12.2.1.3.0.x
org.apache.sshd / sshd-mina	2.0.0	2.7.0
org.apache.sshd / sshd-core	2.0.0	2.7.0

Vulnerability Database

289,599

CVE-2021-30129