CVE-2021-30129

🗓️ 12 Jul 2021 12:10:10Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 303 Views

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.3	18 Jun 202414:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to denial of service due to sshd-core (CVE-2021-30129)	10 Jan 202310:35	–	ibm
Circl	CVE-2021-30129	12 Jul 202116:17	–	circl
CNNVD	Apache MINA 安全漏洞	12 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-30129 DoS/OOM leak vulnerability in Apache Mina SSHD Server	12 Jul 202112:10	–	cvelist
Debian CVE	CVE-2021-30129	12 Jul 202112:10	–	debiancve
EUVD	EUVD-2021-1649	7 Oct 202500:30	–	euvd
Github Security Blog	Buffer Overflow in Apache Mina SSHD	2 Aug 202116:54	–	github
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	20 Apr 202200:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Communications	20 Apr 202200:00	–	ncsc

NVD

Vulners

Node

apache sshdRange2.0.0–2.7.0

Node

oracle banking_paymentsMatch14.5

oracle banking_trade_financeMatch14.5

oracle banking_treasury_managementMatch14.5

oracle communications_cloud_native_core_consoleMatch1.9.0

oracle flexcube_universal_bankingRange14.0.0–14.3.0

oracle flexcube_universal_bankingMatch14.5

oracle middleware_common_libraries_and_toolsMatch12.2.1.3.0

oracle middleware_common_libraries_and_toolsMatch12.2.1.4.0

oracle middleware_common_libraries_and_toolsMatch14.1.1.0.0

oracle oss_support_toolsMatch2.12.42

oracle retail_customer_management_and_segmentation_foundationMatch18.0

oracle retail_customer_management_and_segmentation_foundationMatch19.0

[
  {
    "product": "Apache Mina SSHD",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "changes": [
          {
            "at": "2.7.0",
            "status": "unaffected"
          }
        ],
        "lessThan": "Apache Mina SSHD*",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/red01829efa2a8c893c4baff4f23c9312bd938543a9b8658e172b853b%40%3Cannounce.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2022.html
openwall	www.openwall.com/lists/oss-security/2021/07/12/1
lists	www.lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3E
oracle	www.oracle.com/security-alerts/cpuapr2022.html

21 Nov 2024 06:03Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24

CVSS 3.16.5

EPSS0.00237

CWE-772