Lucene search
GoogleOSV:CVE-2021-30129HistoryJul 12, 2021 - 12:15 p.m.
CVE-2021-30129
2021-07-1212:15:07
Google
osv.dev
5
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| mina-sshd | eq | sshd-2.4.0 | |
| mina-sshd | eq | sshd-2.5.1 | |
| mina-sshd | eq | sshd-2.1.0 | |
| mina-sshd | eq | sshd-2.2.0 | |
| mina-sshd | eq | sshd-2.6.0 | |
| mina-sshd | eq | sshd-2.0.0 | |
| mina-sshd | eq | sshd-2.5.0 | |
| mina-sshd | eq | sshd-2.3.0 |
References
www.openwall.com/lists/oss-security/2021/07/12/1
lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3E
lists.apache.org/thread.html/red01829efa2a8c893c4baff4f23c9312bd938543a9b8658e172b853b%40%3Cannounce.apache.org%3E
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
github
github
Buffer Overflow in Apache Mina SSHD
2021-08-02 16:54:09
cvelist
cvelist
CVE-2021-30129 DoS/OOM leak vulnerability in Apache Mina SSHD Server
2021-07-12 12:10:10
prion
prion
Design/Logic Flaw
2021-07-12 12:15:00
nvd
nvd
CVE-2021-30129
2021-07-12 12:15:07
redhatcve
redhatcve
CVE-2021-30129
2021-07-12 18:31:42
cve
cve
CVE-2021-30129
2021-07-12 12:15:07
osv
osv
Buffer Overflow in Apache Mina SSHD
2021-08-02 16:54:09
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2021-07-13 08:34:42
nessus
nessus
RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8 (Moderate) (RHSA-2021:4677)
2021-11-16 00:00:00
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7 (Moderate) (RHSA-2021:4676)
2021-11-17 00:00:00
Oracle NoSQL Database Multiple Vulnerabilities (Oct 2021 CPU)
2021-10-20 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00