CVEvulnerability

CVE-2021-30129

6.5 MEDIUM Published 2021-07-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-772

Description

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Affected configurations

• apache sshd (>= 2.0.0 < 2.7.0) • oracle banking payments 14.5 • oracle banking trade finance 14.5 • oracle banking treasury management 14.5 • oracle communications cloud native core console 1.9.0 • oracle flexcube universal banking (>= 14.0.0 <= 14.3.0) • oracle flexcube universal banking 14.5 • oracle middleware common libraries and tools 12.2.1.3.0 • oracle middleware common libraries and tools 12.2.1.4.0 • oracle middleware common libraries and tools 14.1.1.0.0 • oracle oss support tools 2.12.42 • oracle retail customer management and segmentation foundation 18.0 • oracle retail customer management and segmentation foundation 19.0

Related

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References