CVE-2021-30129: Apache Sshd

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0

Affected products

• Apache Sshd: from 2.0.0, before 2.7.0 (fixed in 2.7.0)
• Oracle Banking Payments: version 14.5 only
• Oracle Banking Trade Finance: version 14.5 only
• Oracle Banking Treasury Management: version 14.5 only
• Oracle Communications Cloud Native Core Console: version 1.9.0 only
• Oracle Flexcube Universal Banking: from 14.0.0, up to and including 14.3.0; version 14.5 only
• Oracle Middleware Common Libraries And Tools: version 12.2.1.3.0 only; version 12.2.1.4.0 only; version 14.1.1.0.0 only
• Oracle OSS Support Tools: version 2.12.42 only
• Oracle Retail Customer Management And Segmentation Foundation: version 18.0 only; version 19.0 only

Published 2021-07-12. Last modified 2026-06-17.