CVEvulnerability

CVE-2021-41973

6.5 MEDIUM Published 2021-11-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-835

Description

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

Affected configurations

• apache mina (< 2.0.22) • apache mina (>= 2.1.0 < 2.1.5) • oracle banking payments 14.5 • oracle banking trade finance process management 14.5 • oracle banking treasury management 14.5 • oracle communications cloud native core console 1.9.0 • oracle customer management and segmentation foundation 18.0 • oracle customer management and segmentation foundation 19.0 • oracle flexcube universal banking (>= 14.0 <= 14.3) • oracle flexcube universal banking 14.5 • oracle fusion middleware common libraries and tools 12.2.1.3.0 • oracle fusion middleware common libraries and tools 12.2.1.4.0 • oracle fusion middleware common libraries and tools 14.1.1.0.0 • oracle oss support tools 2.12.42

Related

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References