CVE-2021-30129: DoS/OOM leak vulnerability in Apache Mina SSHD Server

Security readout for executives and security teams

CVE-2021-30129 is an availability issue in Apache Mina SSHD. An attacker may be able to exhaust server memory through affected SFTP or port forwarding functionality, causing an OutOfMemory error and service disruption. The sources identify Apache Mina SSHD 2.0.0 and later before 2.7.0 as affected. Exposure is most likely in Java applications, products, or appliances embedding Apache Mina SSHD sshd-core and enabling SFTP or port forwarding. Internet-facing or partner-facing SSH services have higher operational risk. The bundle also references Oracle CPU advisories, but does not identify specific Oracle products here. Prioritize remediation for exposed SSH services that use Apache Mina SSHD SFTP or port forwarding. This is not evidenced as actively exploited in the supplied sources, but a successful denial of service could disrupt file transfer, administration, or application workflows. Mitigation focus: Upgrade Apache Mina SSHD to 2.7.0 or later where affected versions are present.; Identify applications or vendor products embedding Apache Mina SSHD sshd-core.; Review vendor guidance for packaged or third-party products using Apache Mina SSHD..

Prepared

Jun 2, 2026, 19:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.