← Back

CVE-2021-30129

nvd nist
Published: Jul 12, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Affected (13)

Apache
1 product
Sshd
Oracle
8 products
Banking Payments
Banking Trade Finance
Banking Treasury Management
Communications Cloud Native Core Console
Flexcube Universal Banking
Middleware Common Libraries And Tools
Oss Support Tools
Retail Customer Management And Segmentation Foundation
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sshd
From 2.0.0 to 2.7.0
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Banking Payments
Version 14.5
Banking Trade Finance
Version 14.5
Banking Treasury Management
Version 14.5
Communications Cloud Native Core Console
Version 1.9.0
Oracle
Flexcube Universal Banking
From 14.0.0 to 14.3.0
Flexcube Universal Banking
Version 14.5
Oracle
Middleware Common Libraries And Tools
Version 12.2.1.3.0
Middleware Common Libraries And Tools
Version 12.2.1.4.0
Middleware Common Libraries And Tools
Version 14.1.1.0.0
Oss Support Tools
Version 2.12.42
Oracle
Retail Customer Management And Segmentation Foundation
Version 18.0
Retail Customer Management And Segmentation Foundation
Version 19.0

Related CWEs

CWE-772
Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (16)

Source: security@apache.org
Mailing ListThird Party Advisory
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Mailing ListVendor Advisory
Source: security@apache.org
Source: security@apache.org
PatchThird Party Advisory
Source: security@apache.org
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.