What is the CVSS score of CVE-2021-30129?

CVE-2021-30129 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 3.4%.

Is there a patch available for CVE-2021-30129?

Yes, a patch is available for CVE-2021-30129. Update the affected software to the latest version immediately.

Sshd CVE-2021-30129

MEDIUM

Missing Release of Resource after Effective Lifetime (CWE-772)

2021-07-12 security@apache.org

Buffer Overflow Apache Sshd Banking Payments Banking Trade Finance Banking Treasury Management Communications Cloud Native Core Console Flexcube Universal Banking Middleware Common Libraries And Tools Oss Support Tools Retail Customer Management And Segmentation Foundation

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jul 12, 2021 - 12:15 nvd

MEDIUM 6.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

619 maven packages depend on org.apache.sshd:sshd-core (25 direct, 594 indirect)

Ecosystem-wide dependent count for version 2.0.0.

DescriptionNVD

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

AnalysisAI

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.0.0 and later versions. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-772. A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0 Affected products include: Apache Sshd, Oracle Banking Payments, Oracle Banking Trade Finance, Oracle Banking Treasury Management, Oracle Communications Cloud Native Core Console. Version information: version 2.0.0.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.