CVE-2021-41973CWE-835

Apache MINA HTTP listener DOS

published November 1, 2021

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04634 · 91.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-11-01T08:35Z
EPSS history
Timeline
  • 01 NOV 08:35Z
    Apache MINA HTTP listener DOS
    cvelistv5