CVE-2021-30129

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

• CWE-772

• http://www.openwall.com/lists/oss-security/2021/07/12/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/red01829efa2a8c893c4baff4f23c9312bd938543a9b8658e172b853b%40%3Cannounce.apache.org%3E
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.html
• http://www.openwall.com/lists/oss-security/2021/07/12/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r6d4f78e192a0c8eabd671a018da464024642980ecd24096bde6db36f%40%3Cusers.mina.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/red01829efa2a8c893c4baff4f23c9312bd938543a9b8658e172b853b%40%3Cannounce.apache.org%3E
• https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpujul2022.html

Published

Jul 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30123FFmpeg <=4.3 contains a buffer overflow vulnerability in lib…8.8
• CVE-2021-30124The unofficial vscode-phpmd (aka PHP Mess Detector) extensio…9.8
• CVE-2021-30125Jamf Pro before 10.28.0 allows XSS related to inventory hist…6.1
• CVE-2021-30126Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 al…6.5
• CVE-2021-30127TerraMaster F2-210 devices through 2021-04-03 use UPnP to ma…7.3
• CVE-2021-30128Apache OFBiz has unsafe deserialization prior to 17.12.07 ve…9.8
• CVE-2021-3013ripgrep before 13 on Windows allows attackers to trigger exe…9.8
• CVE-2021-30130phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA …7.5
• CVE-2021-30132Cloudera Manager 7.2.4 has Incorrect Access Control, allowin…9.8
• CVE-2021-30133A cross-site scripting (XSS) vulnerability in CloverDX Serve…6.1
• CVE-2021-30134php-mod/curl (a wrapper of the PHP cURL extension) before 2.…6.1
• CVE-2021-30137Assyst 10 SP7.5 has authenticated XXE leading to SSRF via XM…8.2