CVE-2021-41973

Published: Nov 1, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

Affected (14)

Products: Apache: Mina · Oracle: Banking Payments, Banking Trade Finance Process Management, Banking Treasury Management, Communications Cloud Native Core Console, Customer Management And Segmentation Foundation, Flexcube Universal Banking, Fusion Middleware Common Libraries And Tools, Oss Support Tools

1 product

8 products

Banking Trade Finance Process Management

Banking Treasury Management

Communications Cloud Native Core Console

Customer Management And Segmentation Foundation

Flexcube Universal Banking

Fusion Middleware Common Libraries And Tools

Oss Support Tools

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apache Mina	Before 2.0.22
Apache Mina	From 2.1.0 to 2.1.5

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Oracle Banking Payments	Version 14.5
Oracle Banking Trade Finance Process Management	Version 14.5
Oracle Banking Treasury Management	Version 14.5
Oracle Communications Cloud Native Core Console	Version 1.9.0
Oracle Customer Management And Segmentation Foundation	Version 18.0
Oracle Customer Management And Segmentation Foundation	Version 19.0
Oracle Flexcube Universal Banking	From 14.0 to 14.3
Oracle Flexcube Universal Banking	Version 14.5
Oracle Fusion Middleware Common Libraries And Tools	Version 12.2.1.3.0
Oracle Fusion Middleware Common Libraries And Tools	Version 12.2.1.4.0
Oracle Fusion Middleware Common Libraries And Tools	Version 14.1.1.0.0
Oracle Oss Support Tools	Version 2.12.42