V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
CVE-2021-41973
DEB
Medium

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed …

CVSS
6.5
Medium
EPSS
0.04
p89
Published
2021-01-01
Updated
2021-01-01
Description

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

Tags · CWE
Pre-auth
CWE-835
Affected products
Banking_paymentsBanking_trade_finance_process_managementBanking_treasury_managementCommunications_cloud_native_core_consoleCustomer_management_and_segmentation_foundationFlexcube_universal_banking 14.0–14.3Flexcube_universal_bankingFusion_middleware_common_libraries_and_toolsOss_support_tools
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: R
Required (R)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.043 · p89
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Debian
MinaMina2
Canonical
MinaMina2
Oracle
Flexcube Universal BankingBanking PaymentsBanking Treasury ManagementOss Support ToolsCommunications Cloud Native Core ConsoleBanking Trade Finance Process ManagementCustomer Management And Segmentation FoundationFusion Middleware Common Libraries And Tools
Apache
Mina
ProductVendorStatus
minaTracked
minaTracked
minaTracked
minaTracked
mina2Tracked
mina2Tracked
mina2Tracked
mina2Tracked
mina2Tracked
mina2Tracked
mina2Tracked
mina2Tracked
banking_payments*Tracked
banking_trade_finance_process_management*Tracked
banking_treasury_management*Tracked
communications_cloud_native_core_console*Tracked
customer_management_and_segmentation_foundation*Tracked
flexcube_universal_banking*Tracked
fusion_middleware_common_libraries_and_tools*Tracked
mina*Tracked
Showing first 20 of 21
Source databases
DEB
CVE
UBU