CVE-2021-41973

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-41973
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41973.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-41973
Aliases
Downstream
Published
2021-11-01T09:15:09.763Z
Modified
2026-05-28T04:07:04.423315585Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "14.0"
                },
                {
                    "last_affected": "14.3"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:flexcube_universal_banking",
            "source": "CPE_RANGE"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:banking_payments:14.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_payments",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_trade_finance_process_management",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:banking_treasury_management",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "1.9.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:communications_cloud_native_core_console",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "18.0"
                },
                {
                    "last_affected": "19.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:customer_management_and_segmentation_foundation",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "14.5"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:flexcube_universal_banking:14.5:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:flexcube_universal_banking",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "12.2.1.3.0"
                },
                {
                    "last_affected": "12.2.1.4.0"
                },
                {
                    "last_affected": "14.1.1.0.0"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:fusion_middleware_common_libraries_and_tools:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:fusion_middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:oracle:fusion_middleware_common_libraries_and_tools:14.1.1.0.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:fusion_middleware_common_libraries_and_tools",
            "source": "CPE_STRING"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "2.12.42"
                }
            ],
            "cpes": [
                "cpe:2.3:a:oracle:oss_support_tools:2.12.42:*:*:*:*:*:*:*"
            ],
            "vendor_product": "oracle:oss_support_tools",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/apache/mina

Affected ranges

Type
GIT
Repo
https://github.com/apache/mina
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
97df92e57a15ea60282a5310df0eefa8527d2286
Introduced
d595254cb8c254204d794457d42219321a6a2306
Fixed
bc9bb230f112f58854bf70660c443cfd52c2bcff
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.0.22"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "2.1.5"
        }
    ],
    "cpe": "cpe:2.3:a:apache:mina:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Affected versions

2.*
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41973.json"