21 matches found
CLEANSTART-2026-YH95295 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-RU53902 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-nifi package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
CLEANSTART-2026-QY15455 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-YO25190 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-nifi package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
CLEANSTART-2026-BT04597 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-TG02520 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-nifi package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
PT-2026-117722
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-SQ46621 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-hive package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-SB27821 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-hive package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
CLEANSTART-2026-GO33321 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-DA93625 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-nifi package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
Apache MINA Heap Buffer Overflow DoS
The vulnerability of the AbstractIoBuffer.resolveClass method in the Apache MINA network-oriented Java application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
UBUNTU-CVE-2026-42779
The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass contains two branches, one of them for static classes or primitive types does not check the class at all, bypassing the classname...
CVE-2026-41409
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...
UBUNTU-CVE-2026-41409
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...
CVE-2026-41409
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...
EUVD-2026-25809
The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied too late after a static initializer in a class to be read might already have been executed. Affected versions are Apache MINA 2.0.0 =...
CVE-2026-41635
Apache MINA's AbstractIoBuffer.resolveClass contains two branches, one of them for static classes or primitive types does not check the class at all, bypassing the classname allowlist and allowing arbitrary code to be executed. The fix checks if the class is present in the accepted class...
UBUNTU-CVE-2026-41635
Apache MINA's AbstractIoBuffer.resolveClass contains two branches, one of them for static classes or primitive types does not check the class at all, bypassing the classname allowlist and allowing arbitrary code to be executed. The fix checks if the class is present in the accepted class...
CVE-2026-41635 Apache MINA: AbstractIoBuffer.resolveClass() null-clazz Branch Skips acceptMatchers Filter — Full Object Deserialization RCE
Apache MINA's AbstractIoBuffer.resolveClass contains two branches, one of them for static classes or primitive types does not check the class at all, bypassing the classname allowlist and allowing arbitrary code to be executed. The fix checks if the class is present in the accepted class...