GitHub Advisoryadvisory · Maven

GHSA-9279-7hph-r3xw Buffer Overflow in Apache Mina SSHD

HIGH Published 2021-08-02 Modified 2021-07-26 Official page ↗
Aliases
CVE-2021-30129
Ecosystem
Maven
Packages
org.apache.sshd:sshd-mina, org.apache.sshd:sshd-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-772
Reviewed
2021-07-13

Affected packages

• Maven org.apache.sshd:sshd-mina: >= 2.0.0, < 2.7.0 → fixed in 2.7.0 • Maven org.apache.sshd:sshd-core: >= 2.0.0, < 2.7.0 → fixed in 2.7.0

Description

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Related

Alias · CVE (1)

  • CVE-2021-30129 A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. vulnerability

Weakness · CWE (1)

  • CWE-772 Missing Release of Resource after Effective Lifetime weakness

References