CVE-2021-30129

apache sshd, oracle banking payments, oracle banking trade finance +6 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-30129

Katalog CVE

CVSS 6.5 · Medium EPSS 3,0%

Kerentanan Missing Release of Resource after Effective Lifetime pada apache sshd, oracle banking payments +7 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Rincian

Terbit di NVD
12 Juli 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-772: Missing Release of Resource after Effective Lifetime
EPSS (30 hari)
3,0% peluang dieksploitasi; lebih tinggi dari 87,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache sshd Versi 2.0.0 hingga sebelum 2.7.0
oracle banking payments Versi 14.5
oracle banking trade finance Versi 14.5
oracle banking treasury management Versi 14.5
oracle communications cloud native core console Versi 1.9.0
oracle flexcube universal banking Versi 14.0.0 hingga 14.3.0
oracle flexcube universal banking Versi 14.5
oracle middleware common libraries and tools Versi 12.2.1.3.0
oracle middleware common libraries and tools Versi 12.2.1.4.0
oracle middleware common libraries and tools Versi 14.1.1.0.0
oracle oss support tools Versi 2.12.42
oracle retail customer management and segmentation foundation Versi 18.0
oracle retail customer management and segmentation foundation Versi 19.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.