What is the CVSS score of CVE-2021-30129?

CVE-2021-30129 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 3.4%.

Is there a patch available for CVE-2021-30129?

Yes, a patch is available for CVE-2021-30129. Update the affected software to the latest version immediately.

Flexcube Universal Banking CVE-2021-30129

MEDIUM

Missing Release of Resource after Effective Lifetime (CWE-772)

2021-07-12 security@apache.org

Buffer Overflow Apache Oracle Flexcube Universal Banking Retail Customer Management And Segmentation Foundation Communications Cloud Native Core Console Oss Support Tools Banking Treasury Management Sshd Middleware Common Libraries And Tools Banking Payments Banking Trade Finance

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jul 12, 2021 - 12:15 nvd

MEDIUM 6.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

619 maven packages depend on org.apache.sshd:sshd-core (25 direct, 594 indirect)

Ecosystem-wide dependent count for version 2.0.0.

DescriptionNVD

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

AnalysisAI

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.0.0 and later versions. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-772. A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0 Affected products include: Apache Sshd, Oracle Banking Payments, Oracle Banking Trade Finance, Oracle Banking Treasury Management, Oracle Communications Cloud Native Core Console. Version information: version 2.0.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.