CVE-2021-30129

6.5 mediumEPSS 3.0%

Medium (6.5). EPSS 3.0% chance of exploitation in the next 30 days. Fixed in org.apache.sshd:sshd-mina 2.7.0.

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-772
Published: 2021-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:sshd
oracle:banking_payments
oracle:banking_trade_finance
oracle:banking_treasury_management
oracle:communications_cloud_native_core_console
oracle:flexcube_universal_banking
oracle:middleware_common_libraries_and_tools
oracle:oss_support_tools
oracle:retail_customer_management_and_segmentation_foundation

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-9279-7hph-r3xw	Maven	org.apache.sshd:sshd-mina	>=2.0.0 <2.7.0	2.7.0
GHSA-9279-7hph-r3xw	Maven	org.apache.sshd:sshd-core	>=2.0.0 <2.7.0	2.7.0

References

Check your stack JSON